176 Certification Products • 3429 Comments • 2479 Questions
What are two benefits of deploying secure private access with SD-WAN?
Refer to the exhibit. An organization must inspect all the endpoint internet traffic on FortiSASE, and exclude Google Maps traffic from the FortiSASE VPN tunnel and redirect it to the endpoint physical interface. Which configuration must you apply to achieve this requiremen...
Refer to the exhibit. A customer needs to implement device posture checks for their remote endpoints while accessing the protected server. They also want the TCP traffic between the remote endpoints and the protected servers to be processed by FortiGate. In this scenario, w...
An organization must block user attempts to log in to non-company resources while using Microsoft Office 365 to prevent users from accessing unapproved cloud resources. Which FortiSASE feature can you implement to meet this requirement?
A customer wants to ensure secure access for private applications for their users by replacing their VPN. Which two SASE technologies can you use to accomplish this task?
Which two purposes is the dedicated IP address used for in a FortiSASE deployment?
A customer wants to upgrade their legacy on-premises proxy to a cloud-based proxy for a hybrid network. Which two FortiSASE features would help the customer achieve this outcome?
How do security profile group objects behave when central management is enabled on FortiSASE?
How does FortiSASE hide user information when viewing and analyzing logs?
Refer to the exhibits. Antivirus is installed on a Windows 10 endpoint, but the windows application firewall is stopping it from running. What will the endpoint security posture check be?
In a FortiSASE secure web gateway (SWG) deployment, which two features protect against web-based threats? ☐
Which two settings are automatically pushed from FortiSASE to FortiClient in a new FortiSASE deployment with default settings?
Refer to the exhibits. You collected the output shown in the exhibits and want to know which interface HTTP traffic will flow through from the user device 10.0.1.101 to the corporate web server 10.0.0.126. All SD-WAN links are stable. Which interface will use FortiGate t...
Which three factors about service-level agreement (SLA) targets and SD-WAN rules should you consider when configuring SD-WAN rules?
Refer to the exhibit. What is the correct Jinja expression to filter the results to show only the MD5 hash values? {{ [slot 1] | [slot 2] [slot 3].[slot 4] }} Select the Jinja expression in the left column, hold and drag it to a blank position on the right. Place the fou...
Review the incident report Packet captures show a host maintaining periodic TLS sessions that imitate normal HTTPS traffic but run on TCP 8443 to a single external host. An analyst flags the traffic as potential command-and-control. During the same period, the host issues freq...
What are three capabilities of the built-in FortiSOAR Jinja editor?
An MSSP uses FortiManager to manage the FortiGate devices of its customers. The administrator grouped the devices for each customer in different ADOMs. For customer A, you configured one SD-WAN overlay template that applies to all devices in the ADOM. For customer B, you confi...
You are given an SD-WAN policy route debug output and asked: Which two conclusions can you draw from the output shown?
Refer to the exhibits. The first exhibit shows the SD-WAN zone HUB1 and SD-WAN member configuration from an SD-WAN template, and the second exhibit shows the output of command diagnose sys sdwan member collected on a FortiGate device. Which statement best describes what the...