Question 1

Refer to the exhibit.

A FortiWeb appliance is configured for load balancing web sessions to internal web servers. The Server Pool

is configured as shown in the exhibit.

How will the sessions be load balanced between server 1 and server 2 during normal operation?

Options :

A : Server 1 will receive 25% of the sessions, Server 2 will receive 75% of the sessions

B : Server 1 will receive 20% of the sessions, Server 2 will receive 66.6% of the sessions

C : Server 1 will receive 33.3% of the sessions, Server 2 will receive 66 6% of the sessions

D : Server 1 will receive 0% of the sessions Server2 will receive 100% of the sessions

Answer: D

Question 2

On a FortiGateConfigured in Transparent mode, which configuration option allows you to control Multicast

traffic passing through the?

Options :

A :

B :

C :

D :

Answer: C

Question 3

Refer to the exhibit showing FortiGate configurations

FortiManager VM high availability (HA) is not functioning as expected after being added to an existing

deployment.

The administrator finds that VRRP HA mode is selected, but primary and secondary roles are greyed out in the

GUI The managed devices never show online when FMG-B becomes primary, but they will show online

whenever the FMG-A becomes primary.

What change will correct HA functionality in this scenario?

Options :

A : Change the FortiManager IP address on the managed FortiGate to 10.3.106.65.

B : Make the monitored IP to match on both FortiManager devices.

C : Unset the primary and secondary roles in the FortiManager CLI configuration so VRRP will decide who is primary.

D : Change the priority of FMG-A to be numerically lower for higher preference

Answer: B

Question 4

Refer to the exhibit.

To facilitate a large-scale deployment of SD-WAN/ADVPN with FortiGate devices, you are tasked with

configuring the FortiGate devices to support injecting of IKE routes on the ADVPN shortcut tunnels.

Which three commands must be added or changed to the FortiGate spoke config vpn ipsec phasei-interface

options referenced in the exhibit for the VPN interface to enable this capability? (Choose three.)

Options :

A : set net-device disable

B : set mode-cfg enable

C : set ike-version 1

D : set add-route enable

E : set mode-cfg-allow-client-selector enable

Answer: A,D

Question 5

You must analyze an event that happened at 20:37 UTC. One log relevant to the event is extracted from

FortiGate logs:

The devices and the administrator are all located in different time zones Daylight savings time (DST) is

disabled

• The FortiGate is at GMT-1000.

• The FortiAnalyzer is at GMT-0800

• Your browser local time zone is at GMT-03.00

You want to review this log on FortiAnalyzer GUI, what time should you use as a filter?

Options :

A : 20:37:08

B : 10:37:08

C : 17:37:08

D : 12.37:08

Answer: C