- All Exams Instant Download
What can the administrator do to fix this problem?
An administrator has configured two fortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device What can the administrator do to fix this problem?A . Verify that the speed and...
What two conclusions can you draw from this command output?
Exhibit. Refer to the exhibit, which shows information about an OSPF interlace What two conclusions can you draw from this command output? (Choose two.)A . The port3 network has more man one OSPF routerB . The OSPF routers are in the area ID of 0.0.0.1.C . The interfaces of the...
Which statement about network processor (NP) offloading is true?
Which statement about network processor (NP) offloading is true?A . For TCP traffic FortiGate CPU offloads the first packets of SYN/ACK and ACK of the three-way handshake to NPB . The NP provides IPS signature matchingC . You can disable the NP for each firewall policy using the command np-acceleration...
What is the destination MAC address or addresses when packets are forwarded from the primary FortiGate to the secondary FortiGate?
Exhibit. Refer to the exhibit, which contains an active-active toad balancing scenario. During the traffic flow the primary FortiGate forwards the SYN packet to the secondary FortiGate. What is the destination MAC address or addresses when packets are forwarded from the primary FortiGate to the secondary FortiGate?A . Secondary physical...
What can you cone udo from this configuration about access to www.facebook, com, which is categorized as Social Networking?
Exhibit. Refer to the exhibit, which shows a partial web filter profile conjuration What can you cone udo from this configuration about access to www.facebook, com, which is categorized as Social Networking?A . The access is blocked based on the Content Filter configurationB . The access is allowed based on...
Which two parameters must you set in the BGP configuration?
Refer to the exhibit, which contains a partial BGP combination. You want to configure a loopback as the OGP source. Which two parameters must you set in the BGP configuration? (Choose two)A . ebgp-enforce-multihopB . recursive-next-hopC . ibgp-enfoce-multihop Questions and Answers PDF 3/41D . update-sourceView AnswerAnswer: A, D Explanation: To...
What two options can you configure in OSPF to block the advertisement of the 10.1.10.0 prefix?
Refer to the exhibit, which shows a routing table. What two options can you configure in OSPF to block the advertisement of the 10.1.10.0 prefix? (Choose two.)A . Remove the 16.1.10.C prefix from the OSPF networkB . Configure a distribute-list-outC . Configure a route-map outD . Disable Redistribute ConnectedView AnswerAnswer:...
What could be the reason?
After enabling IPS you receive feedback about traffic being dropped. What could be the reason?A . Np-accel-mode is set to enableB . Traffic-submit is set to disableC . IPS is configured to monitorD . Fail-open is set to disableView AnswerAnswer: D Explanation: Fail-open is a feature that allows traffic to...
Which ADVPN configuration must be configured using a script on fortiManager, when using VPN Manager to manage fortiGate VPN tunnels?
Which ADVPN configuration must be configured using a script on fortiManager, when using VPN Manager to manage fortiGate VPN tunnels?A . Enable AD-VPN in IPsec phase 1B . Disable add-route on hubC . Configure IP addresses on IPsec virtual interlacesD . Set protected network to allView AnswerAnswer: A Explanation: To...
What can you conclude from this output?
Refer to the exhibit. which contains a partial configuration of the global system. What can you conclude from this output?A . NPs and CPs are enabledB . Only CPs arc disabledC . Only NPs are disabledD . NPs and CPs arc disabledView AnswerAnswer: D Explanation: The configuration output shows various...
