What is the purpose of an internal segmentation firewall (ISFW)?

• A.It inspects incoming traffic to protect services in the corporate DMZ.
• B.It splits the network into multiple security segments to minimize the impact of breaches.
• C.It is an all-in-one security appliance that is placed at remote sites to extend the enterprise network.
• D.It is the first line of defense at the network perimeter.

Comment: *

Name: *

Email: *

Verification: *

Which statement about memory conserve mode is true?

• A.A FortiGate starts dropping new sessions when the configured memory use threshold reaches red
• B.A FortiGate exits conserve mode when the configured memory use threshold reaches yellow.
• C.A FortiGate starts dropping all the new and old sessions when the configured memory use threshold reaches extreme.
• D.A FortiGate enters conserve mode when the configured memory use threshold reaches red

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibits, which show the configuration on FortiGate and partial session information for internet traffic from a user on the internal network.

If the priority on route ID 2 were changed from 10 to 0, what would happen to traffic matching that user session?

• A.The session would remain in the session table, but its traffic would now egress from both port1 and port2.
• B.The session would remain in the session table, and its traffic would egress from port2.
• C.The session would be deleted, and the client would need to start a new session.
• D.The session would remain in the session table, and its traffic would egress from port1.

Comment: *

Name: *

Email: *

Verification: *

An administrator has configured the following CLI script on FortiManager, which failed to apply any changes to the managed device after being executed.

Why didn't the script make any changes to the managed device?

• A.CLI scripts will add objects only if they are referenced by policies.
• B.Incomplete commands are ignored in CLI scripts.
• C.Static routes can only be added using TCL scripts.
• D.Commands that start with the # sign are not executed.

Comment: *

Name: *

Email: *

Verification: *

View the central management configuration shown in the exhibit, and then answer the question below.

Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?

• A.10.0.1.244
• B.10.0.1.242
• C.10.0.1.240
• D.One of the public FortiGuard distribution servers

Comment: *

Name: *

Email: *

Verification: *