Which two statements about FortiGate FSSO agentless polling mode are true? (Choose two.) A. FortiGate uses the AD server as the collector agent. B. FortiGate uses the SMB protocol to read the event viewer logs from the DCs. C. FortiGate does not support workstation check. D. FortiGate directs the collector agent to use a remote LDAP server.
FortiGuard categories can be overridden and defined in different categories. To create a web rating override for example.com home page, the override must be configured using a specific syntax.
Which two syntaxes are correct to configure web rating override for the home page? (Choose two.) A. www.exaple.com B. www.example.com/index.html C. example.com D. www.example.com:443.
Refer to the exhibits to view the firewall policy (Exhibit A) and the antivirus profile (Exhibit B).
Exhibit A.
Which statement is correct if a user is unable to receive a block replacement message when downloading an infected file for the first time? A. The flow-based inspection is used, which resets the last packet to the user. B. The volume of traffic being inspected is too high for this model of FortiGate. C. The firewall policy performs the full content inspection on the file. D. The intrusion prevention security profile needs to be enabled when using flow-based inspection mode.
Which three options are the remote log storage options you can configure on FortiGate? (Choose three.) A. FortiSandbox B. FortiCloud C. FortiSIEM D. FortiCache E. FortiAnalyzer.
Which statement correctly describes NetAPI polling mode for the FSSO collector agent? A. NetAPI polling can increase bandwidth usage in large networks. B. The NetSessionEnum function is used to track user logouts. C. The collector agent must search security event logs. D. The collector agent uses a Windows API to query DCs for user logins.
An administrator is running a sniffer command as shown in the exhibit.
Which three pieces of information are included in the sniffer output? (Choose three.) A. Interface name B. IP header C. Application header D. Packet payload E. Ethernet header.
The exhibit contains the configuration for an SD-WAN Performance SLA, as well as the output of diagnose sys virtual-wan-link health-check.
Which interface will be selected as an outgoing interface? A. port2 B. port3 C. port4 D. port1.
An administrator does not want to report the logon events of service accounts to FortiGate.
What setting on the collector agent is required to achieve this? A. Add user accounts to the Ignore User List. B. Add the support of NTLM authentication. C. Add user accounts to the FortiGate group filter. D. Add user accounts to Active Directory (AD).
The global settings on a FortiGate device must be changed to align with company security policies.
What does the Administrator account need to access the FortiGate global settings? A. Enable two-factor authentication B. Change Administrator profile C. Change password D. Enable restrict access to trusted hosts.
Which two statements are true about the Security Fabric rating? (Choose two.) A. The Security Fabric rating is a free service that comes bundled with all FortiGate devices. B. Many of the security issues can be fixed immediately by clicking Apply where available. C. The Security Fabric rating must be run on the root FortiGate device in the Security Fabric. D. It provides executive summaries of the four largest areas of security focus.
|
