Page: 1
/ 12
Total 60 questions
Refer to the exhibit.
The exhibit shows a full-mesh topology between FortiGate and FortiSwitch devices. To deploy this configuration, two requirements must be met: "¢ 20 Gbps full duplex connectivity is available between each FortiGate and the FortiSwitch devices "¢ The FortiGate HA must be in AP mode
Referring to the exhibit, what are two actions that will fulfill the requirements? (Choose two.)
- A. Configure the master FortiGate with one LAG and FortiLink split interface disabled on ports connected to cables A and C and make sure the same ports are used for cables B and D on the slave.
- B. Configure the master FortiGate with one LAG and FortiLink split interface enabled on ports connected to cables A and C and make sure the same ports are used for cables B and D on the slave.
- C. Configure both FortiSwitch devices as peers with ICL over cable E, create one MCLAG on ports connected to cables A and C, and create another MCLAG on ports connected to cables B and D.
- D. Configure both FortiSwitch devices as peers with ISL over cable E, create one MCLAG on ports connected to cables A and C, and create another MCLAG on ports connected to cables B and D.
Answer : AC
You want to manage a FortiGate with the FortiCloud service. The FortiGate shows up in your list of devices on the FortiCloud Web site, but all management functions are either missing or grayed out.
Which statement is correct in this scenario?
- A. The management tunnel mode on the managed FortiGate must be changed to normal.
- B. The managed FortiGate is running a version of FortiOS that is either too new or too old for FortiCloud.
- C. The managed FortiGate requires that a FortiCloud management license be purchased and applied.
- D. You must manually configure system central-management on the FortiGate CLI and set the management type to fortiguard.
Answer : D
Refer to the exhibit.
The exhibit shows the steps for creating a URL rewrite policy on a FortiWeb.
Which statement represents the purpose of this policy?
- A. The policy redirects all HTTPS URLs to HTTP.
- B. The policy redirects all HTTP URLs to HTTPS.
- C. The policy redirects only HTTP URLs containing the ^/(.*)$ string to HTTPS.
- D. The policy redirects only HTTPS URLs containing the ^/(.*)$ string to HTTP.
Answer : B
You are asked to add a FortiDDoS to the network to combat detected slow connection attacks such as Slowloris.
Which prevention mode on FortiDDoS will protect you against this specific type of attack?
- A. asymmetric mode
- B. aggressive aging mode
- C. rate limiting mode
- D. blocking mode
Answer : B
You are building a FortiGate cluster which is stretched over two locations. The HA connections for the cluster are terminated on the local switches in the data centers. Once the FortiGate devices have booted, they do not form a cluster. The network operators inform you that CRC errors are present on the switches where the FortiGate devices are connected.
What should you do to solve this problem?
- A. Set the speed/duplex setting to 1 Gbps / Full Duplex.
- B. Replace the cables where the CRC errors occur.
- C. Place the HA interfaces in dedicated VLANs.
- D. Change the ethertype for the HA packets.
Answer : D
31 days access 