Refer to the exhibit. A FortiGate is configured for a dial-up IPsec VPN to allow multiple remote FortiGate devices to connect to it. However, FortiGate A and B have problems connecting to the VPN. Only one of them can be connected at a time. If site B tries to connect while site A is...Continue reading
Refer to the exhibit. The exhibit shows the steps for creating a URL rewrite policy on a FortiWeb. Which statement represents the purpose of this policy?A . The policy redirects all HTTPS URLs to HTTC . The policy redirects all HTTP URLs to HTTPE . The policy redirects only HTTP URLs containing the ^/(.*)$...Continue reading
You are building a FortiGate cluster which is stretched over two locations. The HA connections for the cluster are terminated on the local switches in the data centers. Once the FortiGate devices have booted, they do not form a cluster. The network operators inform you that CRC errors are present on the switches where...Continue reading
Consider the following FortiGate configuration: Which command-line option for deep inspection SSL would have the FortiGate re-sign all untrusted self-signed certificates with the trusted Fortinet_CA_SSL certificate?A . blockB . inspectC . allowD . ignore View Answer Answer: D...
Refer to the exhibit. The exhibit shows a full-mesh topology between FortiGate and FortiSwitch devices. To deploy this configuration, two requirements must be met: – 20 Gbps full duplex connectivity is available between each FortiGate and the FortiSwitch devices – The FortiGate HA must be in AP mode Referring to the exhibit, what are...Continue reading
Refer to the exhibit. You created a custom health-check for your FortiWeb deployment. Given the output shown in the exhibit, which statement is true?A . The FortiWeb must receive an RST packet from the server.B . The FortiWeb must receive an HTTP 200 response code from the server.C . The FortiWeb must match the...Continue reading
You want to access the JSON API on FortiManager to retrieve information on an object. In this scenario, which two methods will satisfy the requirement? (Choose two.)A . Download the WSDL file from FortiManager administration GUC . Make a call with the curl utility on your workstation.D . Make a call with the SoapUI...Continue reading
You are administering the FortiGate 5000 and FortiGate 7000 series products. You want to access the HTTPS GUI of the blade located in logical slot 3 of the secondary chassis in a high-availability cluster. Which URL will accomplish this task?A . https://192.168.1.99:44322B . https://192.168.1.99:44323C . https://192.168.1.99:44313D . https://192.168.1.99:44302 View Answer Answer: B...
Refer to the exhibit. A FortiGate device is configured to authenticate SSL VPN users using digital certificates. A partial FortiGate configuration is shown in the exhibit. Referring to the exhibit, which two statements about this configuration are true? (Choose two.)A . The authentication will fail if the user certificate does not contain the user...Continue reading
You want to manage a FortiGate with the FortiCloud service. The FortiGate shows up in your list of devices on the FortiCloud Web site, but all management functions are either missing or grayed out. Which statement is correct in this scenario?A . The management tunnel mode on the managed FortiGate must be changed to...Continue reading