Question 1

Refer to the exhibit showing FortiGate configurations

FortiManager VM high availability (HA) is not functioning as expected after being added to an existing

deployment.

The administrator finds that VRRP HA mode is selected, but primary and secondary roles are greyed out in the

GUI The managed devices never show online when FMG-B becomes primary, but they will show online

whenever the FMG-A becomes primary.

What change will correct HA functionality in this scenario?

Options :

A : Change the FortiManager IP address on the managed FortiGate to 10.3.106.65.

B : Make the monitored IP to match on both FortiManager devices.

C : Unset the primary and secondary roles in the FortiManager CLI configuration so VRRP will decide who is primary.

D : Change the priority of FMG-A to be numerically lower for higher preference

Answer: B

Question 2

Refer to the exhibit.

You have deployed a security fabric with three FortiGate devices as shown in the exhibit. FGT_2 has the following configuration:

Options :

A : Objects from the FortiGate FGT_2 will be synchronized to the upstream FortiGate.

B : Objects from the root FortiGate will only be synchronized to FGT__2.

C :

Objects from the root FortiGate will not be synchronized to any downstream FortiGate.

D : Objects from the root FortiGate will only be synchronized to FGT_3.

Answer: A

Question 3

On a FortiGateConfigured in Transparent mode, which configuration option allows you to control Multicast

traffic passing through the?

Options :

A :

B :

C :

D :

Answer: C

Question 4

Refer to the exhibit, which shows diagnostic output.

A customer reports that ICMP traffic flow from 192.168.1.11 to 93.190.134.171 is not corresponding to the SD-WAN setup. What is the problem in this scenario?

Options :

A : SD-WAN Rule is matching only DNS traffic.

B : Port1 is used because it has more available bandwidth.

C : Traffic is matched by policy route.

D : Route for the destination IP is missing in the routing table.

Answer: C

Question 5

Refer to the exhibit.

A FortiWeb appliance is configured for load balancing web sessions to internal web servers. The Server Pool

is configured as shown in the exhibit.

How will the sessions be load balanced between server 1 and server 2 during normal operation?

Options :

A : Server 1 will receive 25% of the sessions, Server 2 will receive 75% of the sessions

B : Server 1 will receive 20% of the sessions, Server 2 will receive 66.6% of the sessions

C : Server 1 will receive 33.3% of the sessions, Server 2 will receive 66 6% of the sessions

D : Server 1 will receive 0% of the sessions Server2 will receive 100% of the sessions

Answer: D