Online Access Free EMEA-Advanced-Support Practice Test

In FortiGate, what is the purpose of the 'set webfilter-profile' command in a firewall policy?

• A.Enables deep packet inspection for web traffic
• B.Sets the web server authentication profile
• C.Configures the web proxy settings
• D.Applies a web filtering profile to block or allow URLs

What is the role of the FortiGate 'set srcintf' command in a firewall policy?

• A.Specifies the source interface for traffic matching
• B.Configures the source NAT interface
• C.Sets the source IP address range
• D.Defines the destination interface for traffic

In FortiGate, what is the purpose of a Virtual IP (VIP)?

• A.To assign a secondary IP to a physical interface
• B.To map an external IP to an internal IP for NAT
• C.To enable load balancing for VPN tunnels
• D.To create a virtual interface for VLANs

What is the default FortiGate behavior when a packet matches no firewall policy?

• A.The packet is dropped
• B.The packet is sent to the IPS engine
• C.The packet is logged and allowed
• D.The packet is forwarded to the default gateway

What are the advantages of using a hub-and-spoke IPSec VPN configuration instead of a fully-meshed set of IPSec tunnels? (Select all that apply below)

• A.Using a hub and spoke topology simplifies configuration because fewer tunnels are required.
• B.Using a hub and spoke topology provides stronger encryption.
• C.Using a hub and spoke topology is required to achieve full redundancy.
• D.The routing table management is simpler because of fewer routes compared to a fully meshed node.