What are two benefits of using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two)

What are two benefits of using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two)A . It improves SD-WAN performance on the managed FortiGate devices.B . It simplifies the deployment and administration of SD-WAN on managed FortiGate devicesC . It sends probe signals as...

June 24, 2022 No Comments READ MORE +

In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two)

In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two)A . Traffic has matched none of the FortiGate policy routesB . Matched traffic failed RPF and was caught by the rule.C . An absolute SD-WAN rule was defined and...

June 20, 2022 No Comments READ MORE +

Which statement about the command route-tag in the SD-WAN rule is true?

Refer to the exhibit. Which statement about the command route-tag in the SD-WAN rule is true?A . It enables the SD-WAN rule to load balance and assign traffic with a route tagB . It tags each route and references the tag in the routing table.C . It uses route tags...

June 20, 2022 No Comments READ MORE +

What would best describe the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?

What would best describe the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?A . Per-IP shaping modeB . Reverse policy shaping modeC . Interface-based shaping modeD . Shared policy shaping modeView AnswerAnswer: D

June 19, 2022 No Comments READ MORE +

Which diagnostic command you can use to show interface-specific SLA logs for the last 10 minutes?

Which diagnostic command you can use to show interface-specific SLA logs for the last 10 minutes?A . diagnose sys virtual-wan-link health-checkB . diagnose sys virtual-wan-link logC . diagnose sys virtual-wan-link sla-lcgD . diagnose sys virtual-wan-link intf-sla-logView AnswerAnswer: D

June 19, 2022 No Comments READ MORE +

To correct this traffic shaping issue on FortiGate, what configuration change must be made on which policy?

Refer to exhibits. Exhibit A. Exhibit B. Exhibit A shows the traffic shaping policy and exhibit B show: the firewall policy FortiGate is not performing traffic shaping as expected basi on the policies shown in the exhibits. To correct this traffic shaping issue on FortiGate, what configuration change must be...

June 14, 2022 No Comments READ MORE +

Which statement is correct about the SD-WAN and ADVPN?

Which statement is correct about the SD-WAN and ADVPN?A . ADVPN interface can be a member of SD-WAN interface.B . Dynamic VPN is not supported as an SD-Wan interface.C . Spoke support dynamic VPN as a static interface.D . Hub FortiGate is limited to use ADVPN as SD-WAN member interface.View...

June 14, 2022 No Comments READ MORE +

Based on the exhibit, what configuration change must be made in which policy so that traffic shaping can be applied to inbound traffic'?

Refer to exhibits. Exhibit A. Exhibit B. Exhibit A shows the firewall policy and exhibit B shows the traffic shaping policy. The traffic shaping policy is being applied to all outbound traffic however inbound traffic is not being evaluated by the shaping policy Based on the exhibit, what configuration change...

June 13, 2022 No Comments READ MORE +

Which two statements about the debug output are correct?

Refer to the exhibit. Which two statements about the debug output are correct? (Choose two)A . FortiGate provides statistics and readings based on historical traffic logs.B . This traffic shaper drops traffic that exceeds the set limits.C . The debug output shows per-lP shaper values and real-time readings.D . Traffic...

June 12, 2022 No Comments READ MORE +

What must you configure to enable ADVPN?

Refer to the exhibit. What must you configure to enable ADVPN?A . On the hub VPN, only the device needs additional phase one settB . ADVPN should only be enabled on unmanaged FortiGate devices.C . Each VPN device has a unique pre-shared key configured separately on phase oneD . The...

June 11, 2022 No Comments READ MORE +