176 Certification Products • 3429 Comments • 2479 Questions
Which three traffic flows are supported by FortiSASE Secure Private Access (SPA)?
A FortiSASE customer has been enforcing always-on VPN for their remote users running FortiClient. What option can be enabled under the customer’s Endpoint Profile to allow them access different resources located in the same L2 network?
A customer needs to implement device posture checks for their remote endpoints while accessing the protected server. They also want the TCP traffic between the remote endpoints and the protected servers to be processed by FortiGate. In this scenario, which two setups will achi...
How does FortiSASE Secure Private Access (SPA) facilitate connectivity to private resources in a hub-and-spoke network?
Refer to the exhibits. A FortiSASE administrator has configured an antivirus profile in the security profile group and applied it to the internet access policy. Remote users are still able to download the eicar.com-zip file from https://eicar.org . Which configuration on F...
What is the role of ZTNA tags in the FortiSASE Secure Internet Access (SIA) and Secure Private Access (SPA) use cases?
Which information does FortiSASE use to bring network lockdown into effect on an endpoint?
You are configuring SD-WAN to load balance network traffic. Which two facts should you consider when setting up SD-WAN?
You have configured the performance SLA with the probe mode as Prefer Passive. What are two observable impacts of this configuration?
Refer to the exhibit. The administrator configured two SD-WAN rules to load balance the traffic. Which interfaces does FortiGate use to steer the traffic from 10.0.1.124 to 10.0.0.254?
A FortiManager administrator opens the revision history and chooses to revert to a previous version. What will this action do to the current device configuration?
Refer to the exhibits. Examine the FortiManager configuration and FortiGate CLI output shown in the exhibit. The NAC feature is being tested with a device connected to port2 on managed FortiSwitch S224EPTF19005867. The NAC policy has been applied to port2, and traffic was g...
You configure the SD-WAN rule ID 4 with two members (port1 and port2) and the strategy lowest cost (SLA). Which two statements about the session shown in the exhibit are true? Note from Brave-Dumps: If on the exam asked to choose one answer only, please choose C only
Refer to the exhibit. You update the spokes configuration of an existing auto-discovery VPN (ADVPN) topology by adding the parameters shown in the exhibit. Which is a valid objective of those settings? Note From Brave-Dumps: If on the exam asked to choose one answer only...
Refer to the exhibits. The configuration of an SD-WAN rule and the corresponding rule status and routing table are shown. You want to understand the expected behavior for traffic that matches the SD-WAN rule, at the time the output was collected. Based on the exhibits, w...
Refer to the exhibits. The administrator increases the member priority on port2 to 20. Assuming the route egressing port2 is still valid, upon configuration changes and the receipt of new packets. Which two actions does FortiGate perform on existing sessions established...
Refer to the exhibit. The administrator configured two SD-WAN rules to load balance traffic. Which interfaces does FortiGate use to steer the traffic from 10.0.1.124 to 10.0.0.254?
Refer to the exhibits. You collected the output shown in the exhibits and want to know which interface HTTP traffic will flow through from the user device 10.0.1.101 to the corporate web server 10.0.0.126. All SD-WAN links are stable. Which interface will FortiGate use t...
Refer to the exhibits. You connect to a device behind branch1_fgt, a branch FortiGate device, and initiate a ping test. The device is part of the LAN subnet and its IP address is 10.0.1.101. Based on the exhibits, which interface uses branch1_fgt to steer the test traffic?
Refer to the exhibits. A FortiSASE administrator is trying to configure FortiSASE as a spoke to a FortiGate hub. The VPN tunnel does not establish. Based on the provided configuration, which configuration needs to be modified to bring the tunnel up?