問題1
Refer to the exhibits.
Based on the current HA status, an administrator updates the override and priority parameters on HQ-NGFW-
1 and HQ-NGFW-2 as shown in the exhibits.
What would be the expected outcome in the HA cluster?
Refer to the exhibits.
Based on the current HA status, an administrator updates the override and priority parameters on HQ-NGFW-
1 and HQ-NGFW-2 as shown in the exhibits.
What would be the expected outcome in the HA cluster?
正確答案: C
說明：（僅 NewDumps 成員可見）
問題2
Which two statements are correct when FortiGate enters conserve mode? (Choose two answers)
Which two statements are correct when FortiGate enters conserve mode? (Choose two answers)
正確答案: A,D
說明：（僅 NewDumps 成員可見）
問題3
Refer to the exhibit.
Which two ways can you view the log messages shown in the exhibit? (Choose two.)
Refer to the exhibit.
Which two ways can you view the log messages shown in the exhibit? (Choose two.)
正確答案: A,D
說明：（僅 NewDumps 成員可見）
問題4
Refer to the exhibits.
The exhibits show a diagram of a FortiGate device connected to the network, as well as the IP pool configuration and firewall policy objects.
The WAN (port2) interface has the IP address
100.65.0.101/24.
The LAN (port4) interface has the IP address
10.0.11.254/24.
Which IP address will be used to source NAT (SNAT) the traffic, if the user on HQ-PC-1 (10.0.11.50) pings the IP address of BR-FGT (100.65.1.111)?
Refer to the exhibits.
The exhibits show a diagram of a FortiGate device connected to the network, as well as the IP pool configuration and firewall policy objects.
The WAN (port2) interface has the IP address
100.65.0.101/24.
The LAN (port4) interface has the IP address
10.0.11.254/24.
Which IP address will be used to source NAT (SNAT) the traffic, if the user on HQ-PC-1 (10.0.11.50) pings the IP address of BR-FGT (100.65.1.111)?
正確答案: D
說明：（僅 NewDumps 成員可見）
問題5
An administrator wants to configure dead peer detection (DPD) on IPsec VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when there is no inbound traffic.
Which DPD mode on FortiGate meets this requirement?
An administrator wants to configure dead peer detection (DPD) on IPsec VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when there is no inbound traffic.
Which DPD mode on FortiGate meets this requirement?
正確答案: B
說明：（僅 NewDumps 成員可見）
問題6
Refer to the exhibit.
Why is the Antivirus scan switch grayed out when you are creating a new antivirus profile for FTP?
Refer to the exhibit.
Why is the Antivirus scan switch grayed out when you are creating a new antivirus profile for FTP?
正確答案: D
說明：（僅 NewDumps 成員可見）
問題7
A new administrator is configuring FSSO authentication on FortiGate using DC Agent Mode. Which step is not part of the expected process?
A new administrator is configuring FSSO authentication on FortiGate using DC Agent Mode. Which step is not part of the expected process?
正確答案: A
問題8
Refer to the exhibit.
Which two statements about the FortiGuard connection are true? (Choose two.)
Refer to the exhibit.
Which two statements about the FortiGuard connection are true? (Choose two.)
正確答案: C,D
說明：（僅 NewDumps 成員可見）
問題9
Refer to the exhibit.
Why did the FortiGate device drop the packet?
Refer to the exhibit.
Why did the FortiGate device drop the packet?
正確答案: B
說明：（僅 NewDumps 成員可見）
問題10
An administrator configures FortiGuard servers as DNS servers on FortiGate using default settings.
What is true about the DNS connection to a FortiGuard server?
An administrator configures FortiGuard servers as DNS servers on FortiGate using default settings.
What is true about the DNS connection to a FortiGuard server?
正確答案: C
說明：（僅 NewDumps 成員可見）