EFW-7.2

A. NGFW-1 will send type 1 and type 2 LSAs. 

B. NGFW-1 will send type 1 and type 4 LSAs. 

C. NGFW-1 will send type 1 and type 5 LSAs. 

D. NGFW-1 will send type 1 and type 3 LSAs

Which two actions must the administrator take? (Choose two.) 

A. Configure the action as quarantine, if an application requires feedback to prevent instability. 

B. Configure central source network address translation (SNAT), if NAT is required. 

C. Create an application control profile and apply the profile to a firewall policy. 

D. Specify an SSLISSH inspection profile on a consolidated policy.

A. When NP acceleration is enabled, firewall sessions may not offload if proxy-based security profiles are included in the firewall policy. 

B. You can disable the NP for each firewall policy using the command np-acceleration set to loose. 

C. The FortiGate CPU offloads all firewall sessions that require FortiOS session helper to the network processing unit (NPU). 

D. For UDP traffic, the FortiGate CPU offloads the first packet to identify it as fast-path traffic

commands on both HA cluster members: 

config system ha 

set link-failed-signal enable 

In which two ways do these commands impact the HA cluster? (Choose two.) 

A. They force the switches to update their MAC forwarding tables, when failover happens. 

B. They force the former primary to send gratuitous ARP packets when the failover happens to indicate that the virtual MAC address is now using a different device. 

C. They force both HA devices for remote link monitoring to detect an issue in the forwarding path. 

D. They force the former primary to shut down all its interfaces for one second when failover happens, excluding the heartbeat and reserved management interfaces.

A network diagram and the output from the command config system ha are shown. 

The administrator has configured the cluster with the commands shown in the exhibit. 

Why is the HA cluster not forming? 

A. The administrator must reconfigure the monitor interface. 

B. The administrator must reconfigure the cluster in active-active mode. 

C. The administrator must reconfigure the cluster in FGSP mode. 

D. The administrator must reconfigure the heartbeat interface.

A. FortiGate will consider all IKEv2 packets as fragmentable. 

B. When an FGSP member in FortiGate fails, FortiGate flushes the corresponding tunnels and sends out dead peer detection probes to find unavailable remote peers. 

C. If fragmentation occurs, FortiGate will allow the packets at the IKE layer. 

D. FortiGate will add additional redundant information to reconstruct any lost or erratically received packets.

Which command should you enter? 

A. get hardware status 

B. diagnose hardware deviceinfo 

C. get hardware cp 

D. diagnose hardware lspci | grep 4e36

A. fec-ingress and fsc-egrsss 

B. dpd and dpd-retryinterval 

C. fragmentation and fragmentation-mtu 

D. keepalive and keylive

A. graceful-restart 

B. ibgp-multipath 

C. bfd  

D. route-reflector-client

What will FortiGate do as a result of this command? 

A. FortiGate will advertise only the corresponding prefixes in the BGP network table to its BGP neighbor, even if it is not in the routing table. 

B. FortiGate will advertise all the prefixes in the BGP network table to its BGP neighbor, even if it is not in the routing table. 

C. FortiGate will not advertise any imported routes received from one BGP neighbor to another. 

D. FortiGate will not advertise the prefixes, if it is not in the routing table.

A. Meta fields must be set to required. 

B. Meta field changes are applied only at the ADOM level. 

C. Meta fields are useful for creating multiple objects with the same logical name but different values. 

D. Meta fields can be used as variables in scripts or provisioning templates.

A. set auto-discovery-receiver enable 

B. set auto-discovery-sender enable 

C. set auto-discovery-forwarder enable 

D. set add-route enable

A. Change the network type to point-to-multipoint 

B. Change the router ID to 0.0.0.65. 

C. Change the router ID to 0.0.0.95 

D. Change the router priority to 200

config router ospf 

set restart-mode graceful-restart 

Which two statements correctly describe the result of the above command? (Choose two.) 

A. In an HA cluster, FortiGate devices will keep the OSPF routes in their routing table to avoid traffic interruption during an HA failover. 

B. The OSPF neighbor that receives the grace link-state advertisement (LSA) will enter into helper mode. 

C. After the default 40 seconds wait time, the OSPF neighbors will resume communication with the restarting router. 

D. FortiGate is configured with graceful restart, and will exit graceful mode, if the network topology changes

A. FortiGate uses the first entry listed in the SAN field in the server certificate. 

B. FortiGate closes the connection because this represents an invalid SSL/TLS header. 

C. FortiGate uses the CN information from the Subject field in the server certificate. 

D. FortiGate uses the SNI from the user’s web browser.

A. IKEv2 fragmentation is performed at IP layer. 

B. The reassembly timeout default value is 30 seconds. 

C. Only some IKE version 2 packets are considered fragmentable. 

D. The maximum number of IKE version 2 fragments are 64