Refer to exhibits. Exhibit A. Exhibit B. Exhibit A shows the firewall policy and exhibit B shows the traffic shaping policy. The traffic shaping policy is being applied to all outbound traffic however inbound traffic is not being evaluated by the shaping policy Based on the exhibit, what configuration change must be made in...Continue reading
Refer to the exhibit. What must you configure to enable ADVPN?A . On the hub VPN, only the device needs additional phase one settB . ADVPN should only be enabled on unmanaged FortiGate devices.C . Each VPN device has a unique pre-shared key configured separately on phase oneD . The protected subnets should be...Continue reading
Refer to exhibits. Exhibit A. Exhibit B. Exhibit A shows the traffic shaping policy and exhibit B show: the firewall policy FortiGate is not performing traffic shaping as expected basi on the policies shown in the exhibits. To correct this traffic shaping issue on FortiGate, what configuration change must be made on which policy?...Continue reading
What would best describe the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?A . Per-IP shaping modeB . Reverse policy shaping modeC . Interface-based shaping modeD . Shared policy shaping mode View Answer Answer: D...
What are two benefits of using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two)A . It improves SD-WAN performance on the managed FortiGate devices.B . It simplifies the deployment and administration of SD-WAN on managed FortiGate devicesC . It sends probe signals as health checks to the...Continue reading
Refer to the exhibit. Which statement about the command route-tag in the SD-WAN rule is true?A . It enables the SD-WAN rule to load balance and assign traffic with a route tagB . It tags each route and references the tag in the routing table.C . It uses route tags for a BGP community...Continue reading
Which diagnostic command you can use to show interface-specific SLA logs for the last 10 minutes?A . diagnose sys virtual-wan-link health-checkB . diagnose sys virtual-wan-link logC . diagnose sys virtual-wan-link sla-lcgD . diagnose sys virtual-wan-link intf-sla-log View Answer Answer: C...
Refer to the exhibit. Which two statements about the debug output are correct? (Choose two)A . FortiGate provides statistics and readings based on historical traffic logs.B . This traffic shaper drops traffic that exceeds the set limits.C . The debug output shows per-lP shaper values and real-time readings.D . Traffic being controlled by the...Continue reading
Which statement is correct about the SD-WAN and ADVPN?A . ADVPN interface can be a member of SD-WAN interface.B . Dynamic VPN is not supported as an SD-Wan interface.C . Spoke support dynamic VPN as a static interface.D . Hub FortiGate is limited to use ADVPN as SD-WAN member interface. View Answer Answer: A...
In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two)A . Traffic has matched none of the FortiGate policy routesB . Matched traffic failed RPF and was caught by the rule.C . An absolute SD-WAN rule was defined and matched trafficD . The...Continue reading