Which two statements about bulk configuration changes made using FortiManager CLI scripts are correct? (Choose two.) A. When run on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate device. B. When run on the Remote FortiGate directly, administrators do not have the option to review the […]

An administrator has configured two FortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device. The administrator decides to enable the setting link-failed-signal to fix the problem. Which statement about this setting is true? A. […]

Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.) A. mem failopen B. IPS failopen C. AV failopen D. UTM failopen Reference: https://docs.fortinet.com/document/fortigate/6.0.0/handbook/681934/conserve-mode

Which two statements about application layer test commands are true? (Choose two.) A. They display real-time application debugs. B. They are used to filter real-time debugs. C. Some of them can be used to restart an application. D. Some of them display statistics and configuration information about a feature or process.

Which two statements about OCVPN are true? (Choose two.) A. Only root vdom supports OCVPN. B. OCVPN supports static and dynamic IPs in WAN interface. C. OCVPN offers only Hub-Spoke VPNs. D. FortiGate devices under different FortiCare accounts can be used to form OCVPN. Reference: https://docs.fortinet.com/document/fortigate/6.0.0/cookbook/977344/one-click-vpn-ocvpn https://docs.fortinet.com/document/fortigate/6.2.9/cookbook/496884/overlay-controller-vpn-ocvpn

When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filter web requests when the client browser does not provide the server name indication (SNI) extension? A. FortiGate uses the CN information from the Subject field in the server certificate. B. FortiGate switches to the full SSL inspection method to decrypt […]

Which two tasks are automated using the Install Wizard on FortiManager? (Choose two.) A. Installing configuration changes to managed devices B. Importing interface mappings from managed devices C. Adding devices to FortiManager D. Previewing pending configuration changes for managed devices Reference: https://docs.fortinet.com/document/fortimanager/6.2.0/administration-guide/668612/using-the-install-wizard-to-install-device-settings-only