Fortinet Certified Network Security Professional Set 1

1.

With FSSO, a domain user could authenticate either against the domain controller running the Collector Agent and Domain Controller Agent, or a domain controller running only the Domain Controller Agent. If you attempt to authenticate with the Secondary Domain Controller running only the Domain Controller Agent, which of the following statements are correct? (Select all that apply.)

The login event is sent to the Collector Agent. The FortiGate unit receives the user information from the Domain Controller Agent of the Secondary Controller. The Collector Agent performs the DNS lookup for the authenticated client's IP address. The user cannot be authenticated with the FortiGate device in this manner because each Domain Controller Agent requires a dedicated Collector Agent.

2.

Examine the two static routes to the same destination subnet 172.20.168.0/24 as shown below; then answer the question following it.
config router static
edit 1
set dst 172.20.168.0 255.255.255.0
set distance 20
set priority 10
set device port1
next
edit 2
set dst 172.20.168.0 255.255.255.0
set distance 20
set priority 20
set device port2
next
end
Which of the following statements correctly describes the static routing configuration provided above?

The FortiGate unit will evenly share the traffic to 172.20.168.0/24 through both routes. The FortiGate unit will share the traffic to 172.20.168.0/24 through both routes, but the port2 route will carry approximately twice as much of the traffic. The FortiGate unit will send all the traffic to 172.20.168.0/24 through port1. Only the route that is using port1 will show up in the routing table.

3.

Examine the static route configuration shown below; then answer the question following it. config router static edit 1 set dst 172.20.1.0 255.255.255.0 set device port1 set gateway 172.11.12.1 set distance 10 set weight 5 next edit 2 set dst 172.20.1.0 255.255.255.0 set blackhole enable set distance 5 set weight 10 next end Which of the following statements correctly describes the static routing configuration provided? (Select all that apply.)

All traffic to 172.20.1.0/24 will always be dropped by the FortiGate unit. As long as port1 is up, all the traffic to 172.20.1.0/24 will be routed by the static route number 1.If the interface port1 is down, the traffic will be routed using the blackhole route. The FortiGate unit will NOT create a session entry in the session table when the traffic is being routed by the blackhole route. The FortiGate unit will create a session entry in the session table when the traffic is being routed by the blackhole route. Traffic to 172.20.1.0/24 will be shared through both routes.

Fortinet Certified Network Security Professional Set 1

Congratulations

COMPANY

Products

OTHERS

Partner

Fortinet Certified Network Security Professional Set 1

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner