What must the administrator change to fix the issue?

Refer to the exhibit, which shows a FortiGate configuration. An administrator is troubleshooting a web filter issue on FortiGate. The administrator has configured a web filter profile and applied it to a policy; however, the web filter is not inspecting any traffic that is passing through the policy. What must...

December 27, 2021 No Comments READ MORE +

Which of the following statements describes IPS adaptive scanning?

The CLI command set intelligent-mode <enable | disable> controls the IPS engine’s adaptive scanning behavior . Which of the following statements describes IPS adaptive scanning?A . Determines the optimal number of IPS engines required based on system load.B . Downloads signatures on demand from FDS based on scanning requirements.C ....

December 25, 2021 No Comments READ MORE +

Based on the debug output, which phase 1 setting is enabled in the configuration of this VPN?

Refer to the exhibit, which contains partial output from an IKE real-time debug. Based on the debug output, which phase 1 setting is enabled in the configuration of this VPN?A . auto-discovery-shortcutB . auto-discovery-forwarderC . auto-discovery-senderD . auto-discovery-receiverView AnswerAnswer: C Explanation: Reference: https://docs.fortinet.com/document/fortigate/6.0.0/handbook/320160/example-advpn-configuration

December 25, 2021 No Comments READ MORE +

Which of the following statements about the exhibit are true?

View the exhibit, which contains the output of a debug command, and then answer the question below. Which of the following statements about the exhibit are true? (Choose two.)A . In the network on port4, two OSPF routers are down.B . Port4 is connected to the OSPF backbone area.C ....

December 25, 2021 No Comments READ MORE +

What statements are correct regarding the output?

View the exhibit, which contains the output of a diagnose command, and then answer the question below. What statements are correct regarding the output? (Choose two.)A . This is an expected session created by a session helper.B . Traffic in the original direction (coming from the IP address 10.171.122.38) will...

December 24, 2021 No Comments READ MORE +

Which two statements about the Security Fabric are true? (Choose two.)

Which two statements about the Security Fabric are true? (Choose two.)A . Only the root FortiGate collects network information and forwards it to FortiAnalyzer.B . FortiGate uses FortiTelemetry protocol to communicate with FortiAnalyzer.C . All FortiGate devices in the Security Fabric must have bidirectional FortiTelemetry connectivity.D . Branch FortiGate devices...

December 24, 2021 No Comments READ MORE +

In which order is each step and phase displayed in the debug output each time a new dial-up user is connecting to the VPN?

An administrator has configured a dial-up IPsec VPN with one phase 2, extended authentication (XAuth) and IKE mode configuration. The administrator has also enabled the IKE real time debug: diagnose debug application ike-1 diagnose debug enable In which order is each step and phase displayed in the debug output each...

December 24, 2021 No Comments READ MORE +

Which statements are correct regarding the output shown?

View the exhibit, which contains the output of diagnose sys session stat, and then answer the question below. Which statements are correct regarding the output shown? (Choose two.)A . There are 0 ephemeral sessions.B . All the sessions in the session table are TCP sessions.C . No sessions have been...

December 24, 2021 No Comments READ MORE +

Which statements about bulk configuration changes using FortiManager CLI scripts are correct? (Choose two.)

Which statements about bulk configuration changes using FortiManager CLI scripts are correct? (Choose two.)A . When executed on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate.B . When executed on the Device Database, you must use the installation wizard to apply the changes to the...

December 23, 2021 No Comments READ MORE +

Which of the following statements is true regarding this configuration?

View the global IPS configuration, and then answer the question below. Which of the following statements is true regarding this configuration?A . IPS will scan every byte in every session.B . FortiGate will spawn IPS engine instances based on the system load.C . New packets will be passed through without...

December 23, 2021 No Comments READ MORE +