Click the Exhibit button.

Your company has two data centers (DC) connected using a Layer 3 network. Servers in farm A need to connect to servers in farm B as though they all were in the same Layer 2 segment. What would be configured on the FortiGates on each DC to allow such connectivity?

• A. Create an IPsec tunnel with Mode encapsulation.
• B. Create an IPsec tunnel with VXLAN encapsulation.
• C. Create an IPsec tunnel with transport mode encapsulation.
• D. Create an IPsec tunnel with VLAN encapsulation.

Explanation: Only visible for ITCertMagic members. You can sign-up / login (it's free).

You are asked to implement a single FortiGate 5000 chassis using Session-aware Load Balance Cluster (SLBC) with Active - Passive FortinControllers. Both FortiControllers have the configuration shown below, with the rest of the configuration set to the default values:
config system ha
set mode dual
set password fortinetnse8
set group-id 5
set chassis-id 1
set minimize-chassis-failover enable
set hbdev "b1"
end
Both FortiControllers show Master status. What is the problem in this scenario?

• A. The b1 interface the two FortiConrollers do not see each other.
• B. The priority should be set higher for ForControllers on slot-1.
• C. The management interface of both FotiControllers was connected on the some network.
• D. The chassis ID settings on FotiControllers on slot 2 should be set to 2.

An organization has one central site and three remote sites. A FortiSIEM has been installed on the central site and now all devices across the remote sites must be centrally monitored by the FortiSIEM at the central site.
Which action will reduce the WAN usage by the monitoring system?

• A. Enable SD-WAN FEC (Forward Error Correction) on the FortiGate at the remote site.
• B. Disable real-time log upload on the remote sites.
• C. Install local Collectors on each remote site.
• D. Install both Supervisor and Collector on each remote site.

Click the Exhibit button.

A customer has just finished their Azure deployment to secure a Web application behind a FortiGate and a FortiWeb. Now they want to add components to protect against advanced threats (zero day attacks), centrally manage the entire environment, and centrally monitor Fortinet and non-Fortinet products.
Which Fortinet solutions will satisfy these requirements?

• A. Use FortiManager for management in Azure, FortSIEM for monitoring and FcrtiSandbox for zero day attacks on their local network.
• B. Use FortiSIEM for management Azure, FortiManager for management, and FortrGate for zero day attacks on their local network.
• C. Use FotiAnalyzer lor monitor in Azure, FortiSlEM for managemnet, and FortiSandbox for zero day attacks on their local network.
• D. Use Fortianalyzer for monitor Azure, FortiSiEM for management, and FortiGate has zero day attacks on their local network.

Click the exhibit.
A VPN IPsec is connecting the headquarters office (HQ) with a branch office (BO) and OSPF is used to redistribute routes between the offices. After deployment, a server with IP address 10.10.10.35 located on the DMZ network of the BO FortiGate, was reported unreachable from hosts located on the LAN network of the same FortiGate.

Referring to the exhibit, which statement is true?

• A. The incoming access list should have an accept action instead deny action to solve the problem.
• B. The ICMP packets are Being blocked by an implicit deny policy.
• C. Enabling NAT on the VPN firewall policy will solve the problem.
• D. A directly connected subnet is being partially superseded by an OSPF redistributed subnet.