Fortinet Network Security Expert 4 Written (400) Set 1

1.

An administrator has configured a dialup IPsec VPN with XAuth. Which method statement best describes this scenario?

Only digital certificates will be accepted as an authentication method in phase 1. Dialup clients must provide a username and password for authentication. Phase 1 negotiations will skip pre-shared key exchange. Dialup clients must provide their local ID during phase 2 negotiations.

2.

Which component of FortiOS performs application control inspection?

Kernel Antivirus engine IPS engine Application control engine

3.

What statement describes what DNS64 does?

Converts DNS A record lookups to AAAA record lookups. Translates the destination IPv6 address of the DNS traffic to an IPv4 address. Synthesizes DNS AAAA records from A records. Translates the destination IPv4 address of the DNS traffic to an IPv6 address.

4.

What does the command diagnose debug fsso-polling refresh-user do?

It refreshes user group information form any servers connected to the FortiGate using a collector agent. It refreshes all users learned through agentless polling. It displays status information and some statistics related with the polls done by FortiGate on each DC. It enables agentless polling mode real-time debug.

5.

Why must you use aggressive mode when a local FortiGate IPsec gateway hosts multiple dialup tunnels?

The FortiGate is able to handle NATed connections only with aggressive mode. FortiClient supports aggressive mode. The remote peers are able to provide their peer IDs in the first message with aggressive mode. Main mode does not support XAuth for user authentication.

6.

Examine the following interface configuration on a FortiGate in transparent mode: Which statement about this configuration is correct?

The FortiGate generates spanning tree BPDU frames. The FortiGate device forwards received spanning tree BPDU frames. The FortiGate can block an interface if a layer-2 loop is detected. Ethernet layer-2 loops are likely to occur.

7.

In a high availability (HA) cluster operating in active-active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offloaded to a secondary FortiGate?

Client > primary FortiGate> secondary FortiGate> primary FortiGate> web server.

Client > secondary FortiGate> web server.

Client >secondary FortiGate> primary FortiGate> web server.

Client> primary FortiGate> secondary FortiGate> web server.

8.

A FortiGate is operating in NAT/Route mode and configured with two virtual LAN (VLAN) sub-interfaces added to the same physical interface. Which statement about the VLAN IDs in this scenario is true?

The two VLAN sub-interfaces can have the same VLAN ID only if they belong to different VDOMs. The two VLAN sub-interfaces must have different VLAN IDs. The two VLAN sub-interfaces can have the same VLAN ID only if they have IP addresses in the same subnet. The two VLAN sub-interfaces can have the same VLAN ID only if they have IP addresses in different subnets.

9.

Which of the following statements about the FSSO collector agent timers is true?

The dead entry timeout interval is used to age out entries with an unverified status. The workstation verify interval is used to periodically check if a workstation is still a domain member. The user group cache expiry is used to age out the monitored groups. The IP address change verify interval monitors the server IP address where the collector agent is installed, and updates the collector agent configuration if itchanges.

10.

What FortiGate configuration is required to actively prompt users for credentials?

You must enable one or more protocols that support active authentication on a firewall policy. You must assign users to a group for active authentication. You must place the firewall policy for active authentication before a firewall policy for passive authentication. You must enable the Authentication setting on the firewall policy.

Fortinet Network Security Expert 4 Written (400) Set 1

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Fortinet Network Security Expert 4 Written (400) Set 1

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner