The CA issued this certificate to which entity?

View the certificate shown to the exhibit, and then answer the following question: The CA issued this certificate to which entity?A . A root CAB . A personC . A bridge CAD . A subordinate CAView AnswerAnswer: A

March 14, 2019 2 Comments READ MORE +

What step is required for this configuration?

An administrator needs to create an SSL-VPN connection for accessing an internal server using the bookmark Port Forward. What step is required for this configuration?A . Configure an SSL VPN realm for clients to use the port forward bookmark.B . Configure the client application to forward IP traffic through FortiClient.C...

March 13, 2019 No Comments READ MORE +

Which statements best describe auto discovery VPN (ADVPN). (Choose two.)

Which statements best describe auto discovery VPN (ADVPN). (Choose two.)A . It requires the use of dynamic routing protocols so that spokes can learn the routes to other spokes.B . ADVPN is only supported with IKEv2.C . Tunnels are negotiated dynamically between spokes.D . Every spoke requires a static tunnel...

March 12, 2019 No Comments READ MORE +

What is a possible reason for this?

Examine the IPS sensor configuration and forward traffic logs shown in the exhibit; then, answer the question below. An administrator has configured the WINDOS_SERVERS IPS sensor in an attempt to determine whether the influx of HTTPS traffic is an attack attempt or not. After applying the IPS sensor, FortiGate is...

March 11, 2019 No Comments READ MORE +

Which statement about the log message is true?

Examine the following web filtering log. Which statement about the log message is true?A . The action for the category Games is set to block.B . The usage quota for the IP address 10.0.1.10 has expired.C . The name of the applied web filter profile is default.D . The web...

March 10, 2019 No Comments READ MORE +

Why did the FortiGate drop the packet?

Examine this output from a debug flow: Why did the FortiGate drop the packet?A . The next-hop IP address is unreachable.B . It failed the RPF check.C . It matched an explicitly configured firewall policy with the action DENE . It matched the default implicit firewall policy.View AnswerAnswer: D

March 9, 2019 No Comments READ MORE +

On a FortiGate with a hard disk, how can you upload logs to FortiAnalyzer or FortiManager? (Choose two.)

On a FortiGate with a hard disk, how can you upload logs to FortiAnalyzer or FortiManager? (Choose two.)A . hourlyB . real tuneC . on-demandD . store-and-uploadView AnswerAnswer: BD

March 9, 2019 No Comments READ MORE +

Which of the following statements correctly describes FortiGates route lookup behavior when searching for a suitable gateway? (Choose two)

Which of the following statements correctly describes FortiGates route lookup behavior when searching for a suitable gateway? (Choose two)A . Lookup is done on the trust packet from the session originatorB . Lookup is done on the last packet sent from the re spenderC . Lookup is done on every...

March 9, 2019 No Comments READ MORE +

Which of the following is the expected FortiGate behavior regarding these two routes to the same destination?

Examine the two static routes shown in the exhibit, then answer title following question. Which of the following is the expected FortiGate behavior regarding these two routes to the same destination?A . FortiGate will load balance all traffic across both routes.B . FortiGate will use the port1 route as the...

March 8, 2019 No Comments READ MORE +

Which statements about the output are correct?

Examine this output from a debug flow: Which statements about the output are correct? (Choose two.)A . FortiGate received a TCP SYN/ACK packet.B . The source IP address of the packet was translated to 10.0.1.10.C . FortiGate routed the packet through port 3.D . The packet was allowed by the...

March 8, 2019 No Comments READ MORE +