Question 1

You have configured the below commands on a FortiGate.What would be the impact of this configuration on FortiGate?

Options :

A : FortiGate will enable strict RPF on ail its interfaces and port1 will be enable for asymmetric routing.

B : FortiGate will enable strict RPF on all its interfaces and port1 will be exempted from RPF checks.

C : Port1 will be enabled with flexible RPF, and all other interfaces will be enabled for strict RPF

D : The global configuration will take precedence and FortiGate will enable strict RPF on all interfaces.

Answer: B

Question 2

Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI.Based on the exhibit, which statement is true?

Options :

A : The Underlay zone is the zone by default.

B : The Underlay zone contains no member.

C : port2 and port3 are not assigned to a zone.

D : The virtual-wan-link and overlay zones can be deleted.

Answer: A

Question 3

Refer to the exhibit.The predefined deep-inspection and custom-deep-inspection profiles exclude some web categories from SSL inspection, as shown in the exhibit. For which two reasons are these web categories exempted? (Choose two.)

Options :

A : The FortiGate temporary certificate denies the browsers access to websites that use HTTP Strict Transport Security.

B : These websites are in an allowlist of reputable domain names maintained by FortiGuard.

C : The resources utilization is optimized because these websites are in the trusted domain list on FortiGate.

D : The legal regulation aims to prioritize user privacy and protect sensitive information for these websites.

Answer: A,D

Question 4

What are three key routing principles in SD-WAN? (Choose three.)

Options :

A : By default. SD-WAN rules are skipped if the included SD-WAN members do not have a valid route to the destination.

B : SD-WAN rules have precedence over any other type of routes.

C : Regular policy routes have precedence over SD-WAN rules.

D : By default. SD-WAN rules are skipped if only one route to the destination is available.

E : By default. SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member.

Answer: A,B,E

Question 5

Which three statements about SD-WAN performance SLAs are true? (Choose three.)

Options :

A : They rely on session loss and jitter.

B : They can be measured actively or passively

C : They are applied in a SD-WAN rule lowest cost strategy

D : They monitor the state of the FortiGate device.

E : All the SLAtargets can be configured.

Answer: A,B,E