Multiple ChoiceSecurity & Fabric Solutions
Question 1. A customer has FortiAP devices in three branch offices managed from a FortiGate in the HQ. Each FortiAP is connected to a dedicated management VLAN. The customer wants the users connected to the FortiAP SSIDs to use the branch local internet connection, but each branch uses a different VLAN ID for the bridge. HQ users travel to different branches and connect to the same SSID. Which configuration option will solve this requirement?
A. Set each FortiAP to a wtp-group and use set vlan-pooling wtp-group on the VAP configuration with the corresponding VLAN ID configuration for each group.
B. Set a FortiAuthenticator for 802.1x authentication with the Tunnel-Type attribute set to VLAN and use set dynamic-vlan enable on the VAP configuration.
C. Use set vlan-pooling round-robin on the VAP configuration with the corresponding vlan-pool.
D. Use set vlan-pooling hash on the VAP configuration with the corresponding vlan-pool.
Multi SelectSecurity & Fabric Solutions
Question 2. A customer with a FortiDDoS 200F protecting their fibre optic internet connection from incoming traffic sees that all the traffic was dropped by the device even though they were not under a DoS attack. The traffic flow was restored after it was rebooted using the GUI. Which two options will prevent this situation in the future? (Choose two)
A. Change the Adaptive Mode.
B. Create an HA setup with a second FortiDDoS 200F
C. Move the internet connection from the SFP interfaces to the LC interfaces
D. Replace with a FortiDDoS 1500F
Multiple ChoiceSecurity & Fabric Solutions
Question 4. Based on the FortiManager HA configurations in the exhibit, which configuration change allows the managed FortiGate to maintain connectivity to the active FortiManager through the HA virtual IP?
A. Change the FortiManager IP address on the managed FortiGate to 10.3.106.65.
B. Make the monitored IP to match on both FortiManager devices.
C. Unset the primary and secondary roles in the FortiManager CLI configuration so VRRP will decide who is primary.
D. Change the priority of FMG-A to be numerically lower for higher preference
Multiple ChoiceSecurity & Fabric Solutions
Question 5. An administrator has configured a FortiGate device to authenticate SSL VPN users using digital certificates. A FortiAuthenticator is the certificate authority (CA) and the OCSP server. Part of the FortiGate configuration is shown below: Based on this configuration, which authentication scenario will FortiGate deny?
A. The user certificate does not contain the OCSP URL.
B. FortiAuthenticator responds to an OCSP request that the user certificate authority is untrusted.
C. FortiAuthenticator responds to an OCSP request that the user certificate status is unknown.