NSE 7 - SASE 26 Architect Exam Materials - Question #63 Discussion
Refer to the exhibit. Which SD-WAN rule and interface uses FortiGate to steer the traffic from the LAN subnet 10.0.1.0/24 to the corporate server 10.2.5.254?
176 Certification Products • 3429 Comments • 2479 Questions
Refer to the exhibit. Which SD-WAN rule and interface uses FortiGate to steer the traffic from the LAN subnet 10.0.1.0/24 to the corporate server 10.2.5.254?
An administrator wants to form an HA cluster using the FGCP protocol. Both FortiGate devices are configured with the set override disable command. Arrange the criteria in the order in which the FGCP protocol uses them to elect the primary FortiGate. Select the criteria in t...
You are reviewing the FortiWeb integration with the Advanced Bot Protection (ABP) service. Match each step in the ABP flow with its description. Select the step in the left column, hold and drag it to a blank position in the column on the right. Place the five correct steps...
Refer to the exhibits. Which two conditions will match this rule and subpatterns?
Refer to the exhibits. You are troubleshooting why the rule shown in the exhibit is generating incidents for successful Remote Desktop Protocol (RDP) connections with correct logins. It should only be triggering when a person fails a login three or more times to the target dev...
Refer to the exhibit. Which two actions can you select in an automation policy to trigger an API call to block an IP address on a FortiGate?
What are two features of collector agent advanced mode?
An administrator configures FortiGuard servers as DNS servers on FortiGate using default settings. What is true about the DNS connection to a FortiGuard server?
An administrator wants to address shadow IT visibility challenges and prevent users from sending sensitive files outside the organization without proper approval. Which FortiSASE method should the administrator implement to achieve these goals?
Which three methods are used by the collector agent for AD polling?
The FortiGate device HQ-NGFW-1 with the IP address 10.0.13.254 sends logs to the FortiAnalyzer device with the IP address 10.0.13.125. The administrator wants to verify that reliable logging is enabled on HQ-NGFW-1. Which exhibit helps with the verification?
Which three statements explain a flow-based antivirus profile?
Refer to the exhibit. Which two fields must you configure before this API gateway rule can function?
You are configuring FortiWeb to handle encrypted HTTPS traffic. You must decide when FortiWeb should terminate SSL and which configuration is required for decryption in each deployment mode. Which two configuration actions correctly implement HTTPS handling on FortiWeb?
A FortiWeb administrator needs to allow a known web indexer to scan the website for search engine visibility. What is the easiest way to allow this on FortiWeb?
You are designing a setup where the FortiGate device is connected to two upstream ISPs using BGP. Part of the requirement is that you must be able to refresh the route advertisements manually without disconnecting the BGP neighborships. Which feature must you enable on the BGP...
Refer to the exhibit. A customer wants FortiClient EMS configured to deploy to 1500 endpoints. The deployment will be integrated with FortiOS and there is an Active Directory server. Given the configuration shown in the exhibit, which two statements about the installation a...
How does FortiExtender connect to FortiSASE in a site-based, remote internet access method?
Which two statements about bounce address tagging and verification (BATV) on FortiMail are true?
A FortiGate must be configured to accept VoIP traffic which will include session initiation protocol (SIP) traffic. Which statement about the VoIP configuration options is correct?