176 Certification Products • 3429 Comments • 2479 Questions
In a transparent VDOM interface, what does the command set forward-domain do?
A vulnerability scan report has revealed that a user has generated traffic to the website example.com using a weak SSL/TLS version supported by the HTTPS web server. What can you do to block all outdated SSL/TLS versions on any HTTPS web server to prevent possible attacks on u...
To secure your enterprise network traffic, which step does FortiGate perform first, when handling the first packets of a session?
Refer to the exhibit. A revision history window at the FortiManager device layer is shown. The IT team is trying to identify the administrator responsible for the most recent update to the FortiGate device database. What can the IT team conclude?
Refer to the exhibit. A partial VPN configuration is shown. Which statement about this VPN IPsec phase 1 configuration is correct?
You are setting up an ADVPN configuration and want to ensure that peer IDs are not exposed during VPN establishment. Which protocol can the administrator use to enhance security?
Refer to the exhibits. The system administrator settings configured on a root FortiGate and the Security Fabric settings configured on a downstream FortiGate are shown. When prompted to sign in with Security Fabric to the downstream FortiGate, a user enters the single sign-...
During the last network migration, the IT department discovered that all zero phase selectors in phase 2 IPsec configurations impact network operations. What are two valid recommendations to prevent potential invalid paths during future migrations?
Refer to the exhibit. A network diagram with a hub and spokes deployment is shown. You must deploy several spokes, including the BGP configuration for the spokes that connect to the hub. Which two commands would you use to minimize the amount of configuration needed on t...
Refer to the exhibit. A normalized interface LAN on FortiManager is shown. Which two statements about this interface configuration are correct?
You receive a FortiAnalyzer alert warning that a 1 TB disk filled up in a day. Upon investigation, you find thousands of unusual DNS log requests, such as JHCMQK.website.com, with no answers. You later discover that DNS exfiltration is occurring through both UDP and TLS. How c...
An administrator must deploy managed FortiSwitch devices in a remote location where multiple VLANs must be used to segment devices. No layer 3 switch or router is present at the site, and the only WAN connectivity is an ISP-provided router connected to the public internet. Whi...
How does FortiSASE hide user information when viewing and analyzing logs?
What action must a FortiSASE customer take to restrict organization SaaS access to only FortiSASE-connected users?
Refer to the exhibit. Why is the end user denied access to twitter.com?
You are checking an enterprise network and see a suspicious packet with the MAC address 00:09:0f:09:18:81. Which two statements about the suspicious packet are correct?
A network administrator enabled antivirus and selected an SSL inspection profile on a firewall policy. When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the file. When downloading the same file through HTTPS, FortiGate does not detect the...
Refer to the exhibits. A network administrator is configuring RADIUS single sign-on (RSSO) on FortiGate to dynamically assign users to specific user groups based on RADIUS accounting messages. Which two configuration steps are required to ensure RSSO user group matching wor...
Which three statements accurately describe step utilities in a playbook step?
Refer to the exhibit. You want to configure a FortiSIEM rule that triggers when a FortiMail device reports at least 100 recipient verification failures for different email accounts in the domain acmecorp.net. What would you add or modify to accomplish this task?