Answers

Correct answer and vote data stay hidden until you click reveal.

• A

  A. Unlike IKEv1, it supports mode config.
• B

  B. It includes stronger Diffie-Hellman (DH) groups, such as Elliptic Curve (ECP) groups.
• C

  C. It exchanges a minimum of two messages to establish a secure tunnel.
• D

  D. It supports the extensible authentication protocol (EAP).

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Answers

Correct answer and vote data stay hidden until you click reveal.

• A

  A. Create a URL filter and apply the web filter profile to the firewall policy.
• B

  B. Create an IP address external connector and apply it to the destination field of the firewall policy.
• C

  C. Create an application sensor and apply the application control profile to the firewall policy.
• D

  D. Create an Internet Service Database (ISDB) group and apply it to the destination field of the firewall policy.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Answers

Correct answer and vote data stay hidden until you click reveal.

• A

  A. Enable DNS filter to protect against DNS exfiltration.
• B

  B. Enable data loss prevention (DLP) to prevent DNS exfiltration.
• C

  C. Use an intrusion prevention system (IPS) profile and DNS exfiltration-related signatures.
• D

  D. Use a file filter profile to protect against DNS exfiltration.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Answers

Correct answer and vote data stay hidden until you click reveal.

• A

  A. set neighbor-group advpn
• B

  B. set prefix 172.16.1.0 255.255.255.0
• C

  C. set prefix 10.0.12.0 255.255.255.0
• D

  D. set route-reflector-client enable

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Answers

Correct answer and vote data stay hidden until you click reveal.

• A

  A. The suspicious packet is related to a cluster configured with the FortiGate Session Life Protocol (FGSP).
• B

  B. The suspicious packet is related to a cluster that has VDOMs enabled.
• C

  C. The suspicious packet corresponds to a port with a physical index equal to 2.
• D

  D. The suspicious packet is related to a cluster with a group-id value lower than 255.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Answers

Correct answer and vote data stay hidden until you click reveal.

• A

  A. The normalized interface LAN will be mapped to the wireless interface for FortiGate-81E model devices.
• B

  B. The normalized interface LAN will be mapped to the port2 interface for NGFW-1 :Core2;.
• C

  C. The normalized interface LAN will be mapped to the Human
• D

  D. The normalized interface LAN will be mapped to the private interface for FortiGate-VM64 model devices.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Answers

Correct answer and vote data stay hidden until you click reveal.

• A

  A. ebgp-multipath
• B

  B. neighbor-range
• C

  C. route-overlap
• D

  D. neighbor-group

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Answers

Correct answer and vote data stay hidden until you click reveal.

• A

  A. Reboot HQ-NGFW-2.
• B

  B. Change the priority from 100 to 160 for HQ-NGFW-2.
• C

  C. Change the priority from 120 to 200 for HQ-NGFW-2.
• D

  D. Enable override in virtual cluster 2 for HQ-NGFW-2.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Answers

Correct answer and vote data stay hidden until you click reveal.

• A

  A. Configure routing protocols to specify allowed subnets over the tunnel.
• B

  B. Configure the VPN with the exact segments that will be encrypted in the phase two selectors.
• C

  C. Configure an IPsec aggregate to create redundancy between each firewall peer
• D

  D. Configure an IP address on the IPsec interface of each firewall to establish unique peer connections and avoid impacting

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Answers

Correct answer and vote data stay hidden until you click reveal.

• A

  A. You can effectively apply a web filtering profile to this traffic.
• B

  B. The subject alternative name (SAN) is necessary to apply security profiles.
• C

  C. The client supports only TLS versions 1.2 and 1.3.
• D

  D. You can effectively apply an antivirus security profile to this traffic.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.