176 Certification Products • 3429 Comments • 2479 Questions
What are two characteristics of HA cluster heartbeat IP addresses in a FortiGate device?
A FortiClient EMS administrator is implementing additional security on FortiClient for compliance checks. Which tags can the administrator configure to detect endpoints based on vulnerability severity levels?
In which two ways can you assign a FortiSwitch port to a VDOM using a multi-tenancy setup?
During FortiSASE provisioning, how many security points of presence (POPs) need to be configured by the FortiSASE administrator?
For monitoring potentially unwanted applications on endpoints, which information is available on the FortiSASE software installations page?
You are trying to create a playbook that creates a manual task showing a list of public IPv6 addresses. You were successful in extracting all IP addresses from a previous action into a variable called ip_list, which contains both private and public IPv4 and IPv6 addresses. You...
As an IT manager, you want to delegate the installation and management of your SD-WAN deployment to a managed security service provider (MSSP). Each site must maintain direct internet access and be secure. You expect significant traffic flow between the sites and want to deleg...
Refer to the exhibit. You want to configure SD-WAN on a network, as shown in the exhibit. The network contains many FortiGate devices. Some are used as next-generation firewalls (NGFW), and some are installed with extensions such as FortiSwitch, FortiAP, or FortiExtender....
Based on the output shown in the exhibit, what can you conclude about the device role and how it handles health checks?
Refer to the exhibits. The SD-WAN overlay template, advanced settings, and the underlay and network advertisement settings are shown. These are the configurations for the secondary hub of a dual-hub SD-WAN topology created with the FortiManager SD-WAN overlay orchestrator....
Which action will FortiGate take if it detects SD-WAN members as dead?
Refer to the exhibit. You configure SD-WAN on a standalone FortiGate device. You want to create an SD-WAN rule that steers traffic related to Facebook and LinkedIn through the less costly internet link. What must you do to set Facebook and LinkedIn applications as destinat...
Refer to the exhibit. How does FortiGate handle the traffic with the source IP address 10.0.1.125 and the destination IP address 128.66.0.125?
When creating a device profiling rule, what are two advantages of registering the device in the host view?
An administrator wants FortiNAC-F to return a group of user-defined RADIUS attributes in RADIUS responses. Which condition must be true to achieve this?
Refer to the exhibit. What will happen to the host of a guest user created from this template if the time of connection is 8:00 PM?
Refer to the exhibits. An administrator has configured the DHCP scope for a registration isolation network, but the isolation process isn’t working. What is the problem with the configuration?
Which two are valid traffic processing actions that a FortiSwitch access control list (ACL) can apply to matching traffic?
A FortiManager administrator has moved a FortiGate device to a new ADOM, but they cannot see the policy or object configurations for that FortiGate. What should the administrator do to see the policy or object configurations?
Refer to the exhibit. Which two actions will occur if you run the script using the Remote FortiGate Directly (via CLI) option?