Security And VPN

You are configuring an IPsec VPN tunnel between two FortiGates. Phase 2 fails to come up. What is the most likely cause?

You are configuring an IPS policy to protect a web server. You notice that traffic is being dropped due to a false positive. Which action is the most efficient way to resolve this while maintaining security?

A FortiGate is performing OSPF routing. You want to redistribute connected routes into OSPF, but only for a specific subnet. How can this be achieved?

What is the default behavior of a FortiGate firewall policy when no explicit policy matches the traffic?

In a BGP deployment, your FortiGate is receiving routes from two different ISPs. You want to influence outbound traffic to prefer ISP1 for specific destinations. Which BGP attribute should you modify?

A network administrator is configuring SSL inspection for a group of users. Which certificate must be installed on the client endpoints to prevent browser certificate warnings?

You are implementing SSL VPN and need to ensure that only compliant corporate laptops can connect. Which feature should you use?

You notice that an IPsec tunnel is up, but no traffic passes. What is the most common reason related to firewall policy configuration?

You are configuring BGP and need to advertise a summary route to your ISP. How do you ensure only the summary route is advertised?

Which FortiGate feature allows you to bypass SSL inspection for specific known-trusted websites to maintain user privacy?

What is the purpose of the 'Any' interface in a firewall policy?

In a complex VPN scenario with NAT-Traversal (NAT-T) enabled, what is the primary purpose of the UDP 4500 port?

Which FortiGate feature should be enabled to prevent internal users from accessing malicious websites based on real-time threat intelligence?

When using an IPS sensor, what is the difference between 'Protect' and 'Monitor' mode?

Which command is used to troubleshoot connectivity by checking the routing table of a specific IP address on the FortiGate?

What is the primary function of the FortiGate Security Fabric?

What does the 'FortiGuard' service provide to the FortiGate?

Which method is the most secure for managing FortiGate devices remotely?

In a site-to-site VPN, you need to allow traffic initiated from the remote site. What configuration is essential on the local FortiGate?

What is the effect of changing the IPS 'buffer' size on a FortiGate device?

You need to inspect traffic between two internal VLANs. How do you ensure this traffic is processed by the FortiGate?

Which TWO of the following are necessary to successfully deploy an SSL VPN in tunnel mode?

When configuring an IPsec tunnel using IKEv2, which THREE parameters are commonly negotiated during Phase 1?

Which TWO of the following are benefits of using the FortiGate flow-based inspection mode?

Which THREE of the following are mandatory for a BGP neighbor adjacency to establish?

Which THREE types of traffic are typically inspected by an IPS policy?

In a high availability (HA) cluster, which THREE settings are synchronized between the primary and secondary units?

Which TWO of the following are valid methods for user authentication on a FortiGate?

Which TWO of the following can be used to optimize IPsec VPN performance?

Which THREE actions can be performed by the FortiGate when a policy match occurs?