問題1
Refer to the exhibit.
The exhibit shows a diagram of a FortiGate device connected to the network, the firewall policy and VIP configuration on the FortiGate device, and the routing table on the ISP router.
When the administrator tries to access the web server public address (203.0.113.2) from the internet, the connection times out. At the same time, the administrator runs a sniffer on FortiGate to capture incoming web traffic to the server and does not see any output.
Based on the information shown in the exhibit, what configuration change must the administrator make to fix the connectivity issue?
Refer to the exhibit.
The exhibit shows a diagram of a FortiGate device connected to the network, the firewall policy and VIP configuration on the FortiGate device, and the routing table on the ISP router.
When the administrator tries to access the web server public address (203.0.113.2) from the internet, the connection times out. At the same time, the administrator runs a sniffer on FortiGate to capture incoming web traffic to the server and does not see any output.
Based on the information shown in the exhibit, what configuration change must the administrator make to fix the connectivity issue?
正確答案: A
說明：（僅 NewDumps 成員可見）
問題2
Refer to the exhibit.
The exhibit shows the FortiGuard Category Based Filter section of a corporate web filter profile.
An administrator must block access to download.com, which belongs to the Freeware and Software Downloads category. The administrator must also allow other websites in the same category.
What are two solutions for satisfying the requirement? (Choose two.)
Refer to the exhibit.
The exhibit shows the FortiGuard Category Based Filter section of a corporate web filter profile.
An administrator must block access to download.com, which belongs to the Freeware and Software Downloads category. The administrator must also allow other websites in the same category.
What are two solutions for satisfying the requirement? (Choose two.)
正確答案: A,B
說明：（僅 NewDumps 成員可見）
問題3
What inspection mode does FortiGate use if it is configured as a policy-based next-generation firewall (NGFW)?
What inspection mode does FortiGate use if it is configured as a policy-based next-generation firewall (NGFW)?
正確答案: A
說明：（僅 NewDumps 成員可見）
問題4
Refer to the exhibit showing a debug flow output.
What two conclusions can you make from the debug flow output? (Choose two.)
Refer to the exhibit showing a debug flow output.
What two conclusions can you make from the debug flow output? (Choose two.)
正確答案: B,C
說明：（僅 NewDumps 成員可見）
問題5
Refer to the exhibits.
Exhibit A shows the application sensor configuration. Exhibit B shows the Excessive-Bandwidth and Apple filter details.
Based on the configuration, what will happen to Apple FaceTime if there are only a few calls originating or incoming?
Refer to the exhibits.
Exhibit A shows the application sensor configuration. Exhibit B shows the Excessive-Bandwidth and Apple filter details.
Based on the configuration, what will happen to Apple FaceTime if there are only a few calls originating or incoming?
正確答案: A
說明：（僅 NewDumps 成員可見）
問題6
An administrator has configured a strict RPF check on FortiGate. Which statement is true about the strict RPF check?
An administrator has configured a strict RPF check on FortiGate. Which statement is true about the strict RPF check?
正確答案: B
說明：（僅 NewDumps 成員可見）
問題7
What is the primary FortiGate election process when the HA override setting is disabled?
What is the primary FortiGate election process when the HA override setting is disabled?
正確答案: A
問題8
To complete the final step of a Security Fabric configuration, an administrator must authorize all the devices on which device?
To complete the final step of a Security Fabric configuration, an administrator must authorize all the devices on which device?
正確答案: C