16 Questions
What must be done during the firmware upgrade process on an active-active HA cluster?
Manually upload the firmware image to each FortiGate
In the context of firewall policy authentication timeout, what does the FortiGate consider as 'idle'?
If it does not see any packets coming from the user’s source IP
When searching for a suitable gateway, how does FortiGate route lookup behavior function?
Lookup is done on every packet, regardless of direction
What happens if a FortiGate device does not undergo manual firmware image upload during a cluster upgrade?
It is excluded from the firmware upgrade process
Which action should be taken to ensure uninterrupted upgrade during a firmware update on an active-active HA cluster?
Enable uninterruptible upgrade by default
Under what circumstances would FortiGate remove the temporary policy for a user's source MAC address?
After a hard timeout specified in the firewall policy authentication settings
What is the primary candidate for FortiGate according to the given information?
Port1 route
According to the explanation provided, what happens when multiple static routes have the same distance?
All routes are active
Why is FortiGate not generating any IPS logs for the HTTPS traffic after applying the IPS sensor?
The firewall policy is not using a full SSL inspection profile
What was the attempted configuration on the WINDOWS_SERVERS IPS sensor mentioned in the text?
Implementing a DoS policy
Based on the provided text, how is the FortiGate handling traffic for new sessions that require inspection?
It is dropped
In FortiGate SSL VPN settings for an SSL VPN portal, what is the default setup regarding WINS servers for name resolution?
By default, FortiGate uses WINS servers to resolve names
In the context of FortiGate static routes to the same destination, what behavior can be expected?
FortiGate will load balance all traffic across both routes
What is the correct behavior of FortiGate when multiple static routes to the same destination have different costs specified?
FortiGate will choose the route with the lowest cost regardless of other factors
What will FortiGate do if a packet arrives for a destination with multiple static routes having equal costs?
FortiGate will perform Equal-Cost Multi-Path (ECMP) load balancing
In FortiGate routing, what happens if a packet's destination does not match any static routes or dynamic routing entries?
FortiGate forwards the packet to the default gateway
Test your knowledge on FortiGate configuration settings and traffic handling with this quiz. Questions cover topics such as WAN IP addresses, debugging commands, and session handling. Get ready to enhance your understanding of network security!
Make Your Own Quizzes and Flashcards
Convert your notes into interactive study material.
Get started for free
