- All Exams Instant Download
Based on the exhibit, which action does FortiGate take?
Refer to the exhibit. Based on the exhibit, which action does FortiGate take?A . FortiGate bounces port5 after it detects all SD-WAN members as dead.B . FortiGate fails over to the secondary device after it detects all SD-WAN members as dead.C . FortiGate brings up port5 after it detects all...
What are three mandatory post-run tasks that must be performed?
The SD-WAN overlay template helps to prepare SD-WAN deployments. To complete the tasks performed by the SD-WAN overlay template, the administrator must perform some post-run tasks. What are three mandatory post-run tasks that must be performed? (Choose three.)A . Create policy packages for branch devices.B . Assign an sdwan_id metadata...
Which two statements are correct about the health check status on this FortiGate device?
Exhibit. The exhibit shows the output of the command diagnose sys sdwan health-check status collected on a FortiGate device. Which two statements are correct about the health check status on this FortiGate device? (Choose two.)A . The health-check VPN_PING orders the members according to the lowest jitter.B . The interface...
In the exhibit, which statement best describes the configuration applied to the FortiGate device?
Refer to the exhibit. An administrator used the SD-WAN overlay template to prepare an IPsec configuration for a hub-and-spoke SD-WAN topology. The exhibit shows the installation preview for one FortiGate device. In the exhibit, which statement best describes the configuration applied to the FortiGate device?A . It is a hub...
Which two interfaces are considered overlay links? (Choose two.)
Which two interfaces are considered overlay links? (Choose two.)A . LAGB . IPsecC . PhysicalD . GREView AnswerAnswer: BD
Based on the output shown in the exhibits, which two reasons can cause the observed behavior?
Refer to the exhibits. Exhibit A shows the packet duplication rule configuration, the SD-WAN zone status output, and the sniffer output on FortiGate acting as the sender. Exhibit B shows the sniffer output on a FortiGate acting as the receiver. The administrator configured packet duplication on both FortiGate devices. The...
What are two common use cases for remote internet access (RIA)? (Choose two.)
What are two common use cases for remote internet access (RIA)? (Choose two.)A . Provide direct internet access on spokesB . Provide internet access through the hubC . Centralize security inspection on the hubD . Provide thorough inspection on spokesView AnswerAnswer: BC Explanation: B. Provide internet access through the hub:...
Which are two benefits of using CLI templates in FortiManager? (Choose two.)
Which are two benefits of using CLI templates in FortiManager? (Choose two.)A . You can reference meta fields.B . You can configure interfaces as SD-WAN members without having to remove references first.C . You can configure FortiManager to sync local configuration changes made on the managed device, to the CLI...
Which two statements about the SD-WAN zone configuration are true? (Choose two.)
Which two statements about the SD-WAN zone configuration are true? (Choose two.)A . The service-sla-tie-break setting enables you to configure preferred member selection based on the best route to the destination.B . You can delete the default zones.C . The default zones are virtual-wan-link and SASE.D . An SD-WAN member...
Which configuration change is required if the responder FortiGate uses a dynamic routing protocol to exchange routes over IPsec?
Refer to the exhibit. Which configuration change is required if the responder FortiGate uses a dynamic routing protocol to exchange routes over IPsec?A . type must be set to static.B . mode-cfg must be enabled.C . exchange-interface-ip must be enabled.D . add-route must be disabled.View AnswerAnswer: D
