Ceritified Information
A corporate network allows internet Access to FSSO users only. The FSSO user student does not have internet access after successfully logged into the Windows AD network. The output of the ‘diagnose debug authd fsso list’ command does not show student as an active FSSO user. Other FSSO users can access the Internet without problems. … Read more
Two independent FortiGate HA clusters are connected to the same broadcast domain. The administrator has reported that both clusters are using the same HA virtual MAC address. This creates a duplicated MAC address problem in the network. What HA setting must be changed in one of the HA clusters to fix the problem? Question: What … Read more
what events are recorded in the crashlogs of a ForitGate device? (Choose two) Question: What events are recorded in the crashlogs of a ForitGate device? Options: A process crash. Configuration changes. Changes in the status of any of the FortiGuard licenses. System entering to and leaving from the proxy conserve mode. Correct Answer The Correct … Read more
A FortiGate is rebooting unexpectedly without any apparent reason. What troubleshooting tools could an administrator use to get more information about the problem? (Choose two.) Question: What troubleshooting tools could an administrator use to get more information about the problem? Options: Firewall monitor. Policy monitor. Logs. Crashlogs. Correct Answer The Correct Answer for this Question … Read more
An administrator is running the following sniffer in a FortiGate: diagnose sniffer packet any “host 10.0.2.10” 2What information is included in the output of the sniffer? (Choose two.) Question: What information is included in the output of the sniffer? Options: Ethernet headers. IP payload. IP headers. Port names. Correct Answer The Correct Answer for this … Read more
what does the dirty flag mean in a FortiGate session? Question: What does the dirty flag mean in a FortiGate session? Options: Traffic has heen hlocked hy the antivirus inspection The next packet must be re-evaluated against the firewall policies. The session must be removed from the former primary unit after an HA failover Traffic … Read more
An administrator has configured two FortiGate devices for an HA cluster While testing the HA failover, the administrator noticed that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link-failed – signal to fix the problem. Which statement is correct regarding … Read more
what is the purpose of an internal segmentation firewall (ISFW)? Question: What is the purpose of an internal segmentation firewall (ISFW)? Options: it inspects incoming traffic to protect services in the corporate DMZ. It is the first line of defense at the network perimeter. It splits the network into multiple security segments to minimize the … Read more
which real time dehug should an administrator enable to troubleshoot RADIUS authentication problems? Question: Which real time dehug should an administrator enable to troubleshoot RADIUS authentication problems? Options: Diagnose debug application radius -1. Diagnose debug application fnbamd -1. Diagnose authd console -log enable. Diagnose radius console -log enable. Correct Answer The Correct Answer for this … Read more
which statements about bulk configuration changes using FortiManager CLI scripts are correct? (Choose two.) Question: Which statements about bulk configuration changes using FortiManager CLI scripts are correct? Options: When executed on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate. When executed on the Device Database, you must use the installation … Read more