Given the routing database shown in the exhibit, which two statements are correct? (Choose two.) The port3 default route has the lowest metric. There will be eight routes active in the routing table. The port1 and port2 default routes are active in the routing table. The port3 default route has the highest distance.
Which statement about the policy ID number of a firewall policy is true? It changes when firewall policies are reordered. It defines the order in which rules are processed. It represents the number of objects used in the firewall policy. It is required to modify a firewall policy using the CLI.
Which two settings can be separately configured per VDOM on a FortiGate device? (Choose two.) Operating mode NGFW mode System time FortiGuard update servers.
The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) for Facebook.
Users are given access to the Facebook web application. They can play video content hosted on Facebook but they are unable to leave reactions on videos or other types of posts.
Which part of the policy configuration must you change to resolve the issue? Add Facebook in the URL category in the security policy. Additional application signatures are required to add to the security policy. Force access to Facebook using the HTTP service. The SSL inspection needs to be a deep content inspection.
When configuring a firewall virtual wire pair policy, which following statement is true? Any number of virtual wire pairs can be included, as long as the policy traffic direction is the same. Only a single virtual wire pair can be included in each policy. Any number of virtual wire pairs can be included in each policy, regardless of the policy traffic direction settings. Exactly two virtual wire pairs need to be included in each policy.
An administrator added a configuration for a new RADIUS server. While configuring, the administrator selected the Include in every user group option.
What will be the impact of using Include in every user group option in a RADIUS configuration? This option places all FortiGate users and groups required to authenticate into the RADIUS server, which, in this case, is FortiAuthenticator. This option places all users into every RADIUS user group, including groups that are used for the LDAP server on FortiGate. This option places the RADIUS server, and all users who can authenticate against that server, into every FortiGate user group. This option places the RADIUS server, and all users who can authenticate against that server, into every RADIUS group.
By default, FortiGate is configured to use HTTPS when performing live web filtering with FortiGuard servers.
Which CLI command will cause FortiGate to use an unreliable protocol to communicate with FortiGuard servers for live web filtering?(shoos) set fortiguard-anycast disable set webfilter-force-off disable set webfilter-cache disable set protocol tcp.
Which two configuration settings are synchronized when FortiGate devices are in an active-active HA cluster? (Choose two.) NTP DNS FortiGate hostname FortiGuard web filter cache.
An administrator wants to configure timeouts for users. Regardless of the user's behavior, the timer should start as soon as the user authenticates and expire after the configured value.
Which timeout option should be configured on FortiGate? soft-timeout new-session idle-timeout hard-timeout auth-on-demand.
Which two statements about the debug flow output are correct? (Choose two.) The default route is required to receive a reply. A new traffic session is created. A firewall policy allowed the connection. The debug flow is of ICMP traffic.
|
