Fortinet Network Security Expert - FortiOS 5.4

1.

What does the command diagnose debug fsso-polling refresh-user do?

It refreshes user group information form any servers connected to the FortiGate using a collector agent. It refreshes all users learned through agentless polling. It displays status information and some statistics related with the polls done by FortiGate on each DC. It enables agentless polling mode real-time debug.

2.

Why must you use aggressive mode when a local FortiGate IPsec gateway hosts multiple dialup tunnels?

The FortiGate is able to handle NATed connections only with aggressive mode. FortiClient supports aggressive mode. The remote peers are able to provide their peer IDs in the first message with aggressive mode. Main mode does not support XAuth for user authentication.

3.

In a high availability (HA) cluster operating in active-active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is offloaded to a secondary FortiGate?

Client > primary FortiGate> secondary FortiGate> primary FortiGate> web server.

Client > secondary FortiGate> web server.

Client >secondary FortiGate> primary FortiGate> web server.

Client> primary FortiGate> secondary FortiGate> web server.

4.

A FortiGate is operating in NAT/Route mode and configured with two virtual LAN (VLAN) sub-interfaces added to the same physical interface. Which statement about the VLAN IDs in this scenario is true?

The two VLAN sub-interfaces can have the same VLAN ID only if they belong to different VDOMs. The two VLAN sub-interfaces must have different VLAN IDs. The two VLAN sub-interfaces can have the same VLAN ID only if they have IP addresses in the same subnet. The two VLAN sub-interfaces can have the same VLAN ID only if they have IP addresses in different subnets.

5.

Which of the following statements about the FSSO collector agent timers is true?

The dead entry timeout interval is used to age out entries with an unverified status. The workstation verify interval is used to periodically check if a workstation is still a domain member. The user group cache expiry is used to age out the monitored groups. The IP address change verify interval monitors the server IP address where the collector agent is installed, and updates the collector agent configuration if itchanges.

6.

What FortiGate configuration is required to actively prompt users for credentials?

You must enable one or more protocols that support active authentication on a firewall policy. You must assign users to a group for active authentication. You must place the firewall policy for active authentication before a firewall policy for passive authentication. You must enable the Authentication setting on the firewall policy.

7.

Which election criterion is used to elect the primary FortiGate in a high availability (HA) cluster when override is enabled?

uptime > priority > port monitor > serial number

port monitor > uptime > priority >serial number

priority > port monitor >uptime >serial number

port monitor > priority > uptime >serial number

8.

Which condition must be met to offload the encryption and decryption of IPsec traffic to an NP6 processor?

Phase 2 must use an encryption algorithm supported by the NP6. Anti-replay must be disabled. IPsec traffic must not be inspected by a session helper. No content inspection can be applied to traffic that is going to be encrypted.

9.

What is the purpose of the Policy Lookup feature?

It searches the matching policy based on an input criteria. It enables hidden security profiles with full logging capabilities and generates Learning Reports based on an input criteria. It finds duplicate objects in firewall policies. It creates a new firewall policy based on an input criteria.

10.

Examine the following web filtering log. Which statement about the log message is true?

The action for the category Games is set to block. The usage quota for the IP address 10.0.1.10 has expired. The name of the applied web filter profile is default. The web site miniclip.com matches a static URL filter whose action is set to Warning.

Fortinet Network Security Expert - FortiOS 5.4

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Fortinet Network Security Expert - FortiOS 5.4

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner