Page: 1
/ 115
Total 575 questions
A FortiGate interface is configured with the following commands:
What statements about the configuration are correct? (Choose two.)
- A. IPv6 clients connected to port1 can use SLAAC to generate their IPv6 addresses.
- B. FortiGate can provide DNS settings to IPv6 clients.
- C. FortiGate can send IPv6 router advertisements (RAs.)
- D. FortiGate can provide IPv6 addresses to DHCPv6 client.
Answer : AC
Which of the following Fortinet hardware accelerators can be used to offload flow-based antivirus inspection? (Choose two.)
- A. SP3
- B. CP8
- C. NP4
- D. NP6
Answer : AB
Under what circumstance would you enable LEARN as the Action on a firewall policy?
- A. You want FortiGate to compile security feature activity from various security-related logs, such as virus and attack logs.
- B. You want FortiGate to monitor a specific security profile in a firewall policy, and provide recommendations for that profile.
- C. You want to capture data across all traffic and security vectors, and receive learning logs and a report with recommendations.
- D. You want FortiGate to automatically modify your firewall policies as it learns your networking behavior.
Answer : C
What methods can be used to deliver the token code to a user who is configured to use two-factor authentication? (Choose three.)
- A. Code blocks
- B. SMS phone message
- C. FortiToken
- D. Browser pop-up window
- E. Email
Answer : BCE
You are tasked to architect a new IPsec deployment with the following criteria:
- There are two HQ sites that all satellite offices must connect to.
- The satellite offices do not need to communicate directly with other satellite offices.
- No dynamic routing will be used.
- The design should minimize the number of tunnels being configured.
Which topology should be used to satisfy all of the requirements?
- A. Redundant
- B. Hub-and-spoke
- C. Partial mesh
- D. Fully meshed
Answer : B
31 days access 