An administrator notices that hardware acceleration (NP6) is failing to offload traffic for a specific policy. Which command is best used to verify if hardware offloading is actually occurring for a specific session?
An administrator is troubleshooting an issue where hardware acceleration is not working after upgrading firmware. Which command identifies if the NP configuration has changed?
A network administrator is configuring an HA cluster with two FortiGates in Active-Passive mode. Which parameter must be identical on both devices to ensure a successful cluster formation?
When configuring an aggregate interface (LACP) on a FortiGate, which mode must be set to ensure traffic is distributed across links based on source and destination IP?
An administrator must apply a specific UTM profile to traffic matching a custom application signature, but the signature is not recognized by the FortiGate. The administrator uploads a custom signature file via the CLI. Which command correctly loads the custom signature file into the IPS engine?
An administrator enables virtual clustering on a FortiGate HA pair with two VDOMs (root and vdom1). The primary unit is handling all traffic for both VDOMs. The administrator wants the secondary unit to actively process traffic for vdom1 while the primary continues processing root traffic. Which setting must be configured to achieve this?
An administrator is configuring a FortiGate in transparent mode. They need to allow traffic between two VLANs that are on the same subnet but separated by the FortiGate. Which configuration is required to enable communication between these VLANs?
An administrator needs to back up the full configuration of a FortiGate device, including all VDOMs, before performing a firmware upgrade. Which backup method ensures that all VDOM configurations are included in a single file?
A network administrator is deploying a new FortiGate HA cluster in Active-Passive mode. The administrator wants to ensure that the cluster can properly synchronize sessions and maintain connectivity during failover. Which two configurations must be identical on both FortiGate devices? (Choose two.)
A network administrator is configuring a new FortiGate to replace an existing firewall. The administrator needs to ensure that the FortiGate can resolve domain names for its own management traffic, such as FortiGuard updates and NTP. Which DNS configuration should be applied?
A network administrator is configuring a FortiGate 600E in NAT mode with virtual domains enabled. The administrator needs to allow management access from the internal network to a guest VDOM's web interface, but the guest VDOM must not be able to reach the management VDOM's administrative services. Which FortiGate feature should be configured to control inter-VDOM administrative access?
An administrator is configuring a FortiGate in transparent mode. The administrator wants to ensure that the FortiGate can be managed remotely via HTTPS on a specific management interface while still allowing traffic to pass through transparently. Which configuration is required?
An administrator is configuring a FortiGate in transparent mode. The administrator wants to allow traffic between two VLANs without changing IP addresses. Which feature must be enabled to allow the FortiGate to forward traffic between VLANs?
A FortiGate is deployed at a branch with a single WAN link that uses DHCP. The administrator must ensure that the FortiGate can still be reached at a stable public IP for remote management, and that this IP does not change even if the DHCP lease is renewed with a different address. Which FortiGate feature should be configured to meet this requirement?
An administrator is configuring a FortiGate HA cluster in Active-Passive mode. The cluster uses two FortiGate 500E devices. The administrator notices that after a failover, some sessions are not being synchronized, causing application timeouts. The administrator verifies that the HA heartbeat interfaces are correctly connected. Which action should be taken to ensure that all sessions are synchronized between the HA nodes?
An administrator is configuring a FortiGate in transparent mode. The FortiGate must inspect traffic between two VLANs that are on the same Layer 2 segment, and it must forward all other VLAN traffic without inspection. Which configuration is required to accomplish this?
A FortiGate is configured with multiple VDOMs. The administrator needs to ensure that management traffic, such as SNMP and syslog, from all VDOMs uses the management VDOM's interfaces. Which configuration setting should be enabled to achieve this?
An administrator is configuring a FortiGate HA cluster in Active-Passive mode. The administrator wants to reduce the time it takes for the secondary node to take over if the primary fails. Which TWO parameters can be adjusted to achieve faster failover? (Choose two.)
A network administrator is deploying a FortiGate 600E cluster in a data center. The security policy requires that management access to the FortiGate be restricted to a dedicated out-of-band management network. The administrator configures a new VLAN interface named 'mgmt-vlan' and assigns it an IP address. After applying the configuration, the administrator notices that the FortiGate is still reachable via the original management IP on port1. What is the most likely cause?
A network administrator manages a FortiGate 600E that processes several high-bandwidth TCP backup streams. The administrator notices that hardware acceleration is consuming excessive session table entries, and the session count is approaching the platform limit. The administrator wants to disable NP6 offloading for a specific traffic type to free session resources. Which CLI command should the administrator use to disable NP6 offloading for a specific protocol?
A network administrator needs to configure a FortiGate to send syslog messages to a remote syslog server. The FortiGate must include the hostname of the FortiGate in the syslog messages. Which CLI command sequence should be used?
A network administrator is troubleshooting a FortiGate in NAT/route mode. The FortiGate has two interfaces: port1 (WAN, IP 203.0.113.1/24) and port2 (LAN, IP 192.168.1.1/24). A firewall policy allows traffic from port2 to port1 with NAT enabled. Users on the LAN can access the internet, but they cannot reach a web server at 198.51.100.10 on the internet. The administrator runs a debug flow and sees that traffic from the LAN is being dropped with the message 'iprope_in_check() check failed, drop'. What is the most likely cause?
A FortiGate is configured with two VDOMs: 'root' and 'vdom1'. The administrator needs to allow HTTP traffic from a user on the internet (connected to the root VDOM) to reach a web server located in vdom1. The web server's IP is 10.1.1.10, and the public IP is 203.0.113.5. Which configuration is required to accomplish this?
A network engineer is troubleshooting a FortiGate 3000D cluster where sessions are not being synchronized between the primary and secondary nodes for traffic passing through a VDOM named 'VDOM_A'. The engineer has verified that HA is up and that session synchronization is enabled globally. Which configuration parameter must be checked to ensure that session synchronization occurs for VDOM_A?
An administrator is configuring a FortiGate to use a remote LDAP server for administrator authentication. The FortiGate must authenticate administrators against the LDAP server, and if the LDAP server is unreachable, the FortiGate must fall back to local authentication. Which configuration is required?
A network administrator is configuring a FortiGate to support a new VoIP deployment. The administrator needs to ensure that SIP traffic is inspected and that the FortiGate can handle the embedded IP addresses in the SIP signaling. Which two actions must be taken to achieve this? (Choose two.)
A network administrator is troubleshooting a FortiGate HA cluster in Active-Passive mode. The administrator notices that the primary unit is processing all traffic, while the secondary unit is idle. The administrator wants to verify that the HA heartbeat interfaces are correctly configured and that the cluster is synchronized. Which command should the administrator use to check the HA status and synchronization?
An administrator is configuring a FortiGate to use a DNS server for resolving domain names. The FortiGate must use the DNS servers provided by the DHCP server on the WAN interface, and it must also be able to resolve names using a specific domain suffix. Which TWO configuration steps are required to accomplish this? (Choose two.)
A FortiGate is configured with a static route to 10.0.0.0/8 via 192.168.1.1. The administrator wants to ensure that if the primary route becomes unavailable, traffic automatically fails over to a backup route via 192.168.2.1. Which configuration should be used?
An administrator needs to configure a FortiGate to act as a DNS server for internal clients. The FortiGate should resolve internal hostnames and forward other queries to external DNS servers. Which feature must be configured?
An administrator wants to configure a FortiGate to act as a DHCP server for a VLAN interface. The DHCP server must provide IP addresses from a specific range and also assign a custom DHCP option 121 (Classless Static Route) to clients. Which configuration step is required?
An administrator is configuring a FortiGate in transparent mode to inspect traffic between two networks. The FortiGate must forward traffic without modifying IP addresses and must allow management access. Which two statements are correct about transparent mode? (Choose two.)
An administrator is configuring a new FortiGate and needs to set the device to automatically synchronize its clock with an external NTP server. Which CLI command is used to enable NTP synchronization?
An administrator is configuring a FortiGate to act as a DNS server for internal clients. The administrator wants to enable DNS forwarding to external servers and also allow the FortiGate to resolve queries for internal domains using its local DNS database. Which TWO configurations are required to achieve this? (Choose two.)
A network administrator is deploying a FortiGate 100F in a branch office. The device will use two WAN links: port1 (primary) and port2 (backup). The administrator wants the FortiGate to automatically use port2 when port1 fails, without manual intervention. Which configuration should be applied?
An administrator is configuring a FortiGate in NAT/route mode. The FortiGate has two VDOMs: 'root' and 'vdom1'. The administrator wants to allow a server in 'vdom1' (IP 10.1.1.10) to be accessed from the internet via a VIP configured on the 'root' VDOM's WAN interface (port1, IP 203.0.113.5). The VIP should translate the public IP to the server's private IP. Which configuration is required to achieve this inter-VDOM routing?
An administrator is configuring a FortiGate to send logs to a FortiAnalyzer device. The FortiAnalyzer is reachable via the management interface. The administrator wants to ensure that logs are sent reliably and that the FortiGate can buffer logs if the FortiAnalyzer is temporarily unreachable. Which two configuration steps are required to achieve this? (Choose two.)
A FortiGate has two WAN interfaces, wan1 and wan2, managed by SD-WAN. The administrator wants traffic for the SaaS application Microsoft 365 to prefer wan1, while all other internet traffic should use wan2 unless wan2 fails. Which SD-WAN configuration element is required to meet this requirement?
A network administrator is deploying a new FortiGate 200F at a branch office. The ISP requires the WAN interface to use a /30 subnet with the address 203.0.113.2/30 and gateway 203.0.113.1. The administrator wants to minimize the number of static routes and ensure the default route automatically follows the WAN link status. Which configuration should the administrator use?
A security administrator needs to allow outbound HTTP and HTTPS traffic from a guest VLAN to the internet. The guest VLAN is on interface VLAN 100, and the internet-facing interface is wan1. The administrator wants to log all allowed sessions and apply a web filter profile to block malicious sites. Which firewall policy configuration is required?
A network administrator is configuring a FortiGate to send logs to a FortiAnalyzer device. The FortiAnalyzer is reachable via the management interface, which is in the 'root' VDOM. The administrator wants to ensure that logs from all VDOMs are sent to FortiAnalyzer and that the connection is secure. Which two actions must the administrator take? (Choose two.)
An administrator is configuring a FortiGate in HA Active-Passive mode. The cluster has two members: FortiGate-1 and FortiGate-2. The administrator wants to ensure that if the primary unit fails, the secondary unit takes over with minimal disruption. The administrator has configured the HA heartbeat interfaces and set the priority of FortiGate-1 to 200 and FortiGate-2 to 100. However, after a power failure on FortiGate-1, FortiGate-2 does not become the primary. What is the most likely cause?
An administrator is deploying a new FortiGate in a high-availability (HA) cluster using FGCP. The administrator must ensure that the cluster can synchronize sessions and maintain uptime during a failover. Which two configuration settings must be identical on both FortiGate devices for the HA cluster to form and function correctly? (Choose two.)
A FortiGate is deployed in a VDOM-enabled configuration with three VDOMs: root, finance, and engineering. The administrator needs to inspect traffic flowing between the finance and engineering VDOMs using a security profile. Which action must be taken to allow inter-VDOM traffic to be inspected?
An administrator has a FortiGate 600E running FortiOS 7.4 with NP6 processors. They enable hardware acceleration on a firewall policy that matches TCP port 445 traffic between two internal subnets. After enabling it, they notice that session setup is offloaded but the first few packets are still processed by the CPU. Which setting should they verify to ensure that the NP6 can accelerate the entire session from the first packet?
An administrator is configuring a FortiGate to use a redundant interface for WAN connectivity. The redundant interface consists of two physical interfaces, port1 and port2. The administrator wants to ensure that if port1 fails, traffic automatically fails over to port2 without manual intervention. Which configuration is required?
A network administrator is troubleshooting a FortiGate HA cluster. The administrator notices that the primary unit's configuration is not synchronizing to the secondary unit. Which CLI command should the administrator use to verify the HA synchronization status and identify any configuration differences?
A FortiGate administrator configured a redundant interface named 'RED1' using 'config system interface' with 'set type redundant'. The interface is up, but traffic is not passing. Which additional step is required to make the redundant interface operational?
A network security engineer is deploying a FortiGate in transparent mode. The engineer needs to ensure that the FortiGate can be managed remotely via HTTPS from the management network, while still passing all other traffic transparently. Which configuration is required?
A network administrator is configuring a new FortiGate and needs to set up an administrator account that can only view logs and monitor system status, without making any configuration changes. Which administrator profile should be assigned to this account?
A FortiGate is deployed as an internal segmentation firewall with VDOMs for each department. The administrator needs to allow a monitoring server in the 'IT' VDOM to reach a syslog server in the 'Mgmt' VDOM over TCP 514. No inter-VDOM links currently exist. What must the administrator configure to permit this traffic while keeping the VDOMs isolated?
A network security administrator is deploying a FortiGate 600E in a data center. The requirement is that the device must be able to inspect traffic flowing between two different VDOMs (VDOM-A and VDOM-B) that are configured on the same physical FortiGate. The administrator has already created both VDOMs and assigned interfaces to them. Which additional configuration is required to allow traffic to pass between these VDOMs?
A network administrator is configuring a FortiGate HA cluster and wants to prevent ARP cache issues on connected switches by using a virtual MAC address. Which configuration mode should be used?
A FortiGate is configured with two VDOMs: 'root' and 'vdom1'. The administrator wants to allow a server in 'vdom1' to be accessed from the internet via a VIP configured in 'root'. The server's default gateway is the FortiGate's interface in 'vdom1'. What must be configured to ensure return traffic from the server to the internet is handled correctly?
An administrator has a FortiGate 600E running FortiOS 7.2 with VDOMs enabled. The 'root' VDOM is in NAT mode and a 'dmz' VDOM is also in NAT mode. The administrator needs to allow HTTP traffic from the 'dmz' VDOM to a web server in the 'root' VDOM, and wants the traffic to be inspected by the firewall policy in the 'root' VDOM. Which configuration is required to accomplish this?
An administrator is troubleshooting a FortiGate HA cluster in Active-Passive mode. The primary unit unexpectedly failed over to the secondary, and the administrator needs to verify which configuration settings are synchronized between the nodes. Which two configuration elements are synchronized by default in an HA cluster? (Choose two.)
A network administrator is configuring a new FortiGate 100F for the first time. The administrator wants to set the hostname, configure the administrative timeout, and enable SSH access on the WAN interface. Which command-line interface (CLI) command should the administrator use to enter the configuration mode for system settings?
A network administrator is configuring a new FortiGate to replace an existing firewall at the network edge. The administrator wants to ensure that the FortiGate can be managed remotely via HTTPS on its WAN interface. Which configuration step is required to allow this access?
An administrator needs to ensure that a FortiGate can be managed via SSH only from the internal network, while also allowing SNMP polling from a management server. The administrator wants to restrict access to the management interface. Which configuration should be applied?
A FortiGate is deployed in a large enterprise network with multiple VDOMs. The administrator needs to configure a firewall policy that allows traffic from any source to any destination while logging all sessions. However, the administrator wants to ensure that the policy does not match traffic that is already being handled by a more specific policy. What is the correct order of policy evaluation in FortiOS?
A network administrator needs to configure a FortiGate to send logs to a FortiAnalyzer. The administrator wants to ensure that logs are sent securely and that the FortiGate can verify the FortiAnalyzer's identity. Which protocol should be used for log transmission?
A FortiGate is deployed in transparent mode between an internal network and a router. Users behind the FortiGate cannot reach the internet, but the FortiGate can ping external addresses. The administrator confirms the forwarding domain is enabled on both interfaces. Which action should the administrator take next to allow traffic to pass through the FortiGate?
An administrator wants to back up the configuration of a FortiGate to a USB drive connected to the device. Which CLI command should the administrator use to perform this backup?
A network administrator is troubleshooting a FortiGate 300E that is experiencing high CPU usage. The administrator suspects that a large amount of traffic is being processed by the CPU instead of being offloaded to the NP6 processor. Which type of traffic is typically NOT offloaded by the NP6 processor and therefore may contribute to high CPU usage?
An administrator is configuring a new FortiGate cluster in an HA environment. The administrator wants to ensure that if the primary unit fails, the secondary unit takes over with minimal disruption to existing sessions. Which HA setting should be configured to allow the secondary unit to maintain session state?
An administrator needs to back up the FortiGate configuration to a USB drive for disaster recovery. The FortiGate has a USB port and the administrator inserts a USB drive. Which command should the administrator use to perform the backup?
A FortiGate is configured with two VDOMs: 'root' and 'dmz'. The administrator wants to use a single physical interface to carry traffic for both VDOMs, keeping the traffic logically separated. Which interface type must be configured to achieve this?
An administrator needs to configure a FortiGate to send logs to a FortiAnalyzer device. The FortiAnalyzer is reachable via the management interface. Which CLI command sequence correctly configures the FortiGate to send logs to the FortiAnalyzer?
An administrator is configuring a FortiGate in transparent mode. The FortiGate will be placed between an internal network and a router. The administrator wants to ensure that the FortiGate can be managed remotely and that it can still perform security inspections. Which two configurations are required? (Choose two.)
A FortiGate is configured with a redundant interface (also known as a link aggregation group) using two physical interfaces. The administrator notices that traffic is not being distributed evenly across the two links; one link is heavily utilized while the other is nearly idle. Which factor is most likely causing this imbalance?
A FortiGate is deployed in a VDOM-enabled configuration. The administrator needs to allow inter-VDOM routing between the 'LAN' VDOM and the 'DMZ' VDOM without sending traffic to an external device. Which action must be performed?
A FortiGate is configured with a static route to a destination network via a next-hop IP. The administrator wants to ensure that if the next-hop becomes unreachable, the route is removed from the routing table. Which feature should be configured?
A network administrator needs to configure a FortiGate to send logs to a FortiAnalyzer device. The administrator wants to ensure that logs are encrypted during transmission. Which protocol should be used for log forwarding?
An administrator is troubleshooting a FortiGate that is not applying a security profile to traffic. The administrator suspects that the traffic is being offloaded to a network processor (NP6) and bypassing the CPU. Which CLI command can be used to verify whether traffic is being offloaded and which sessions are affected?
A network administrator is configuring a FortiGate in transparent mode. The FortiGate is deployed between an internal network and a router. The administrator wants to ensure that the FortiGate forwards traffic without modifying the source or destination IP addresses. Which statement describes the correct behavior of a FortiGate in transparent mode?
An administrator is troubleshooting a FortiGate that is experiencing high CPU usage. The administrator suspects that the IPS engine is the cause. Which command should be used to verify the CPU usage of the IPS engine process?
An administrator is deploying a FortiGate in Transparent mode between an internal router and the ISP edge router. The FortiGate must forward IPv4 traffic without modifying source or destination addresses, and must be reachable at 10.10.10.1 for management from the internal network. Which configuration step is required?
An administrator is configuring an HA cluster of two FortiGates in Active-Passive mode. The cluster must maintain session continuity for TCP traffic when a failover occurs, and the administrator wants to minimize unnecessary failovers caused by link flaps on a monitored interface. (Choose two.)
A network administrator is setting up a new FortiGate and wants to back up the configuration to a TFTP server at 192.168.1.50 before making changes. The administrator is logged into the CLI as the admin user. Which command correctly performs the backup?
A FortiGate is configured with two VDOMs: 'root' and 'internal'. The administrator wants to assign a physical interface to the 'internal' VDOM and then create a VLAN subinterface on that physical interface within the same VDOM. Which VDOM mode must be enabled, and what is the correct sequence of steps?
A network administrator is configuring a FortiGate 600E to manage bandwidth for a critical VoIP VLAN. The administrator needs to guarantee 2 Mbps for SIP signaling and allow burst up to 4 Mbps, while ensuring that unused bandwidth can be shared with other traffic when not needed. Which QoS method should the administrator use to meet these requirements?
A network administrator is setting up a new FortiGate and needs to configure the device to send alert emails for high-severity events. The administrator wants to use the FortiGate's built-in email client and ensure that emails are sent from a specific address. Which configuration step is required to enable email notifications?
An administrator is configuring a FortiGate in transparent mode. The FortiGate is placed between a router and a switch, and it must inspect traffic without changing IP addresses. The administrator wants to enable broadcast forwarding to allow DHCP broadcasts to pass through. Which statement is correct regarding broadcast forwarding in transparent mode?