Question 1

What are three key routing principles in SD-WAN? (Choose three.)

Options :

A : By default. SD-WAN rules are skipped if the included SD-WAN members do not have a valid route to the destination.

B : SD-WAN rules have precedence over any other type of routes.

C : Regular policy routes have precedence over SD-WAN rules.

D : By default. SD-WAN rules are skipped if only one route to the destination is available.

E : By default. SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member.

Answer: A,B,E

Question 2

Which three statements about SD-WAN performance SLAs are true? (Choose three.)

Options :

A : They rely on session loss and jitter.

B : They can be measured actively or passively

C : They are applied in a SD-WAN rule lowest cost strategy

D : They monitor the state of the FortiGate device.

E : All the SLAtargets can be configured.

Answer: A,B,E

Question 3

Refer to the exhibit.The predefined deep-inspection and custom-deep-inspection profiles exclude some web categories from SSL inspection, as shown in the exhibit. For which two reasons are these web categories exempted? (Choose two.)

Options :

A : The FortiGate temporary certificate denies the browsers access to websites that use HTTP Strict Transport Security.

B : These websites are in an allowlist of reputable domain names maintained by FortiGuard.

C : The resources utilization is optimized because these websites are in the trusted domain list on FortiGate.

D : The legal regulation aims to prioritize user privacy and protect sensitive information for these websites.

Answer: A,D

Question 4

Refer to the exhibit.As an administrator you have created an IPS profile, but it is not performing as expected. While testing you got the output as shown in the exhibit. What could be the possible reason of the diagnose output shown in the exhibit?

Options :

A : There is a no firewall policy configured with an IPS security profile.

B : FortiGate entered into IPS fail open state.

C : Administrator entered the command diagnose test application ipsmonitor 5.

D : Administrator entered the command diagnose test application ipsmonitor 99.

Answer: A

Question 5

When configuring firewall policies which of the following is true regarding the policy ID?

Options :

A : It is mandatory to provide a policy ID while creating a firewall policy regardless of GUI or CLI.

B : A firewall policy ID identifies the order of policy execution in firewall policies.

C : You can create a policy in CLI with policy ID 0.

D : A policy ID cannot be edited once a policy is created.

Answer: D