Security And VPN

Which THREE of the following are mandatory for a BGP neighbor adjacency to establish?

You need to inspect traffic between two internal VLANs. How do you ensure this traffic is processed by the FortiGate?

Which TWO of the following are benefits of using the FortiGate flow-based inspection mode?

You notice that an IPsec tunnel is up, but no traffic passes. What is the most common reason related to firewall policy configuration?

In a site-to-site VPN, you need to allow traffic initiated from the remote site. What configuration is essential on the local FortiGate?

Which FortiGate feature should be enabled to prevent internal users from accessing malicious websites based on real-time threat intelligence?

In a BGP deployment, your FortiGate is receiving routes from two different ISPs. You want to influence outbound traffic to prefer ISP1 for specific destinations. Which BGP attribute should you modify?

You are implementing SSL VPN and need to ensure that only compliant corporate laptops can connect. Which feature should you use?

Which TWO of the following can be used to optimize IPsec VPN performance?

When using an IPS sensor, what is the difference between 'Protect' and 'Monitor' mode?

A network administrator is configuring SSL inspection for a group of users. Which certificate must be installed on the client endpoints to prevent browser certificate warnings?

What is the primary function of the FortiGate Security Fabric?

Which command is used to troubleshoot connectivity by checking the routing table of a specific IP address on the FortiGate?

When configuring an IPsec tunnel using IKEv2, which THREE parameters are commonly negotiated during Phase 1?

Which THREE types of traffic are typically inspected by an IPS policy?

What is the purpose of the 'Any' interface in a firewall policy?

In a high availability (HA) cluster, which THREE settings are synchronized between the primary and secondary units?

What is the effect of changing the IPS 'buffer' size on a FortiGate device?

Which FortiGate feature allows you to bypass SSL inspection for specific known-trusted websites to maintain user privacy?

Which method is the most secure for managing FortiGate devices remotely?

You are configuring an IPsec VPN tunnel between two FortiGates. Phase 2 fails to come up. What is the most likely cause?

In a complex VPN scenario with NAT-Traversal (NAT-T) enabled, what is the primary purpose of the UDP 4500 port?

You are configuring an IPS policy to protect a web server. You notice that traffic is being dropped due to a false positive. Which action is the most efficient way to resolve this while maintaining security?

What does the 'FortiGuard' service provide to the FortiGate?

Which THREE actions can be performed by the FortiGate when a policy match occurs?

Which TWO of the following are necessary to successfully deploy an SSL VPN in tunnel mode?

You are configuring BGP and need to advertise a summary route to your ISP. How do you ensure only the summary route is advertised?

A FortiGate is performing OSPF routing. You want to redistribute connected routes into OSPF, but only for a specific subnet. How can this be achieved?

What is the default behavior of a FortiGate firewall policy when no explicit policy matches the traffic?

Which TWO of the following are valid methods for user authentication on a FortiGate?