QUESTION 37
Which statement about network processor (NP) offloading is true?

QUESTION 38
Refer to the exhibit, which shows a network diagram.

Which IPsec phase 2 configuration should you impalement so that only one remote site is connected at any time?

QUESTION 39
Which two statements about IKE vision 2 are true? (Choose two.)

QUESTION 40
Exhibit.

Refer to the exhibit, which contains a partial policy configuration.
Which setting must you configure to allow SSH?

QUESTION 41
Refer to the exhibits, which contain the network topology and BGP configuration for a hub.
Exhibit A.

Exhibit B.

An administrator is trying to configure ADVPN with a hub and spoke VPN setup using iBGP. All the VPNs are up and connected to the hub. The hub is receiving route information from both spokes over iBGP; however the spokes are not receiving route information from each other.
What change must the administrator make to the hub BGP configuration so that the routes learned from one spoke are forwarded to the other spoke?

QUESTION 42
Exhibit.


Refer to the exhibit, which contains an ADVPN network diagram and a partial BGP con figuration Which two parameters Should you configure in config neighbor range? (Choose two.)

QUESTION 43
You want to block access to the website ww.eicar.org using a custom IPS signature.
Which custom IPS signature should you configure?

QUESTION 44
Exhibit.

Refer to the exhibit, which shows information about an OSPF interlace
What two conclusions can you draw from this command output? (Choose two.)

QUESTION 45
Exhibit.

Refer to exhibit, which shows a central management configuration
Which server will FortiGate choose for web filler rating requests if 10.0.1.240 is experiencing an outage?

QUESTION 46
Refer to the exhibit, which contains a TCL script configuration on FortiManager.

An administrator has configured the TCL script on FortiManager, but the TCL script failed to apply any changes to the managed device after being run.
Why did the TCL script fail to make any changes to the managed device?

QUESTION 47
Refer to the exhibit, which contains a partial OSPF configuration.

What can you conclude from this output?

QUESTION 48
While configuring the BGP protocol, an administrator applies the set network-import-check disable command under config network.
What will FortiGate do as a result of this command?

QUESTION 49
Exhibit.

Refer to the exhibit, which contains the partial interface configuration of two FortiGate devices.
Which two conclusions can you draw from this con figuration? (Choose two)

QUESTION 50
Exhibit.

Refer to the exhibit, which shows an ADVPN network.
The client behind Spoke-1 generates traffic to the device located behind Spoke-2.
Which first message floes the hub send to Spoke-110 bring up the dynamic tunnel?

QUESTION 51
Which, three conditions are required for two FortiGate devices to form an OSPF adjacency? (Choose three.)

QUESTION 52
Refer to the exhibit, which shows an error in system fortiguard configuration.

What is the reason you cannot set the protocol to udp in config system fortiguard?

QUESTION 53
Exhibit.

Refer to the exhibit, which provides information on BGP neighbors.
Which can you conclude from this command output?

QUESTION 54
Which statement about network processor (NP) offloading is true?

QUESTION 55
Exhibit.

Refer to the exhibit, which shows information about an OSPF interlace
What two conclusions can you draw from this command output? (Choose two.)

QUESTION 56
Exhibit.

Refer to the exhibit, which shows a partial web filter profile conjuration What can you cone udo from this configuration about access to www.facebook, com, which is categorized as Social Networking?