Question 1

Which three steps are executed to get antivirus and IPS updates using the pull method? (Choose three.)

Options :

A : FortiGate starts sending rating queries to one of the servers in the list.

B : FortiGate periodically queries for pending updates.

C : FortiGate gets a list of server IP addresses that can be contacted.

D : FortiGate contacts a DNS server to resolve the FortiGuard domain name.

Answer: A,B,D

Question 2

Refer to the exhibit, which shows the output of a web filtering diagnose command.

Which configuration change would result in non-zero results in the cache statistics section?

Options :

A : set server-type rating under config system central-management

B : set webfilter-cache enable under config system fortiguard

C : set webfilter-force-off disable under config system fortiguard

D : set ngfw-mode policy-based under config system settings

Answer: B

Question 3

Refer to the exhibit, which shows the output of a debug command.

What can be concluded from the debug command output?

Options :

A : The OSPF router with the ID 0.0.0.69 has its OSPF priority set to 0.

B : The local FortiGate has a different MTU value from the OSPF router with ID 0.0.0.2, based on the state information.

C : There are more than two OSPF routers on the wan2 network.

D : The interface ToRemote is a broadcast OSPF network.

Answer: C

Question 4

What is the diagnose test application ipsmonitor 99 command used for?

Options :

A : To enable IPS bypass mode

B : To provide information regarding IPS sessions

C : To disable the IPS engine

D : To restart all IPS engines and monitors

Answer: D

Question 5

An administrator wants to simplify a new hub-and-spoke network deployment with the BGP recommended configuration.

Which two sections on FortiManager must the administrator use? (Choose two.)

Options :

A : Automation Stitch

B : Provisioning Templates

C : Meta Fields

D : Metadata Variables

Answer: B,D