What are two benefits of a Nozomi integration with FortiNAC?
What are two benefits of a Nozomi integration with FortiNAC? (Choose two.) A. Enhanced point of connection details B. Direct VLAN assignment C. Adapter consolidation for multi-adapter hosts D. Importation and classification of hosts
Which two statements about bulk configuration changes made using FortiManager CLI scripts are correct?
Which two statements about bulk configuration changes made using FortiManager CLI scripts are correct? (Choose two.) A. When run on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate device. B. When run on the Remote FortiGate directly, administrators do not have the option to review the […]
An administrator has configured two FortiGate devices for an HA cluster.
An administrator has configured two FortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device. The administrator decides to enable the setting link-failed-signal to fix the problem. Which statement about this setting is true? A. […]
Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conse
Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.) A. mem failopen B. IPS failopen C. AV failopen D. UTM failopen Reference: https://docs.fortinet.com/document/fortigate/6.0.0/handbook/681934/conserve-mode
Which two statements about application layer test commands are true?
Which two statements about application layer test commands are true? (Choose two.) A. They display real-time application debugs. B. They are used to filter real-time debugs. C. Some of them can be used to restart an application. D. Some of them display statistics and configuration information about a feature or process.
Which two statements about OCVPN are true?
Which two statements about OCVPN are true? (Choose two.) A. Only root vdom supports OCVPN. B. OCVPN supports static and dynamic IPs in WAN interface. C. OCVPN offers only Hub-Spoke VPNs. D. FortiGate devices under different FortiCare accounts can be used to form OCVPN. Reference: https://docs.fortinet.com/document/fortigate/6.0.0/cookbook/977344/one-click-vpn-ocvpn https://docs.fortinet.com/document/fortigate/6.2.9/cookbook/496884/overlay-controller-vpn-ocvpn
When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filter web reque
When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filter web requests when the client browser does not provide the server name indication (SNI) extension? A. FortiGate uses the CN information from the Subject field in the server certificate. B. FortiGate switches to the full SSL inspection method to decrypt […]
Which two tasks are automated using the Install Wizard on FortiManager?
Which two tasks are automated using the Install Wizard on FortiManager? (Choose two.) A. Installing configuration changes to managed devices B. Importing interface mappings from managed devices C. Adding devices to FortiManager D. Previewing pending configuration changes for managed devices Reference: https://docs.fortinet.com/document/fortimanager/6.2.0/administration-guide/668612/using-the-install-wizard-to-install-device-settings-only
Which two phases are part of the process to plan a wireless design project?
Which two phases are part of the process to plan a wireless design project? (Choose two.) A. Project information phase B. Hardware selection phase C. Site survey phase D. Installation phase Reference: https://www.sciencedirect.com/topics/computer-science/wireless-site-survey https://www.automation.com/en-us/articles/2015-2/wireless-device-network-planning-and-design
When configuring a wireless network for dynamic VLAN allocation, which three IETF attributes must be supplied
When configuring a wireless network for dynamic VLAN allocation, which three IETF attributes must be supplied by the radius server? (Choose three.) A. 81 Tunnel-Private-Group-ID B. 65 Tunnel-Medium-Type C. 83 Tunnel-Preference D. 58 Egress-VLAN-Name E. 64 Tunnel-Type Explanation: The RADIUS user attributes used for the VLAN ID assignment are: IETF 64 (Tunnel Type)—Set this to […]