Q10. After enabling IPS you receive feedback about traffic being dropped.
What could be the reason?

Q11. Refer to the exhibit, which contains a partial BGP combination.

You want to configure a loopback as the OGP source.
Which two parameters must you set in the BGP configuration? (Choose two)

Q12. Exhibit.

Refer to the exhibit, which contains a CLI script configuration on fortiManager. An administrator configured the CLI script on FortiManager rut the script tailed to apply any changes to the managed device after being executed.
What are two reasons why the script did not make any changes to the managed device? (Choose two)

Q13. You want to block access to the website ww.eicar.org using a custom IPS signature.
Which custom IPS signature should you configure?

Q14. In which two ways does fortiManager function when it is deployed as a local FDS? (Choose two)

Q15. Exhibit.


Refer to the exhibit, which contains an ADVPN network diagram and a partial BGP con figuration Which two parameters Should you configure in config neighbor range? (Choose two.)

Q16. Exhibit.

Refer to the exhibit, which contains a partial policy configuration.
Which setting must you configure to allow SSH?

Q17. Refer to the exhibit, which shows config system central-management information.

Which setting must you configure for the web filtering feature to function?

Q18. Which two statements about the BFD parameter in BGP are true? (Choose two.)

Q19. Which two statements about the Security fabric are true? (Choose two.)

Q20. You created a VPN community using VPN Manager on FortiManager. You also added gateways to the VPN community. Now you are trying to create firewall policies to permit traffic over the tunnel however, the VPN interfaces do not appear as available options.

Q21. Exhibit.

Refer to the exhibit, which contains an active-active toad balancing scenario.
During the traffic flow the primary FortiGate forwards the SYN packet to the secondary FortiGate.
What is the destination MAC address or addresses when packets are forwarded from the primary FortiGate to the secondary FortiGate?

Q22. Refer to the exhibit, which shows an error in system fortiguard configuration.

What is the reason you cannot set the protocol to udp in config system fortiguard?

Q23. Exhibit.

Refer to the exhibit, which contains a partial policy configuration.
Which setting must you configure to allow SSH?

Q24. After enabling IPS you receive feedback about traffic being dropped.
What could be the reason?

Q25. Which statement about network processor (NP) offloading is true?

Q26. Exhibit.

Refer to the exhibit, which contains the partial interface configuration of two FortiGate devices.
Which two conclusions can you draw from this con figuration? (Choose two)

Q27. Which two statements about metadata variables are true? (Choose two.)

Q28. Which two statements about bfd are true? (Choose two)

Q29. Refer to the exhibit, which shows a routing table.

What two options can you configure in OSPF to block the advertisement of the 10.1.10.0 prefix? (Choose two.)

Q30. An administrator has configured two fortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device What can the administrator do to fix this problem?

Q31. You want to configure faster failure detection for BGP.
Which parameter should you enable on both connected FortiGate devices?

Q32. Exhibit.

Refer to the exhibit, which shows a partial web filter profile conjuration What can you cone udo from this configuration about access to www.facebook, com, which is categorized as Social Networking?