To provide DHCP addresses to clients<\/span><\/li>\n<\/ol>\nAnswer: 3. To automatically perform an action when a configured event occurs<\/b><\/p>\n
Explanation:<\/b><\/p>\n
An automation stitch allows FortiGate to respond automatically when a specified trigger or event occurs. A trigger can be associated with an action, allowing the device to perform tasks without requiring an administrator to intervene manually each time. Depending on the configuration, actions can include sending notifications, executing commands, or interacting with external services. Automation stitches can therefore improve operational efficiency and response consistency. They do not replace firewall policies, create physical interfaces, or function as DHCP servers. Their main purpose is event-driven automation.<\/span><\/p>\nQuestion 142. Which action can be used by a FortiGate automation stitch to notify an external system?<\/b><\/h3>\n\n- <\/b> Webhook<\/span>
\n<\/span>2.<\/b> VLAN tagging<\/span>
\n<\/span>3.<\/b> Static routing<\/span>
\n<\/span>4.<\/b> DHCP relay<\/span><\/li>\n<\/ol>\nAnswer: 1. Webhook<\/b><\/p>\n
Explanation:<\/b><\/p>\n
A webhook action can send information from FortiGate to an external web service when a configured automation trigger occurs. This can be useful for integrating FortiGate events with external monitoring, notification, or automation platforms. The receiving service can then process the event according to its own configuration. Webhooks are therefore useful when network security events need to be communicated outside the FortiGate environment. VLAN tagging, static routing, and DHCP relay perform networking functions and do not provide the same event-notification mechanism.<\/span><\/p>\nQuestion 143. What is the purpose of FortiGate device identification?<\/b><\/h3>\n\n- <\/b> To assign administrator passwords<\/span>
\n<\/span>2.<\/b> To identify devices connected to the network<\/span>
\n<\/span>3.<\/b> To create IPsec encryption keys<\/span>
\n<\/span>4.<\/b> To replace DNS filtering<\/span><\/li>\n<\/ol>\nAnswer: 2. To identify devices connected to the network<\/b><\/p>\n
Explanation:<\/b><\/p>\n
FortiGate device identification helps administrators obtain information about devices communicating through the firewall. Depending on available traffic information and configuration, FortiGate can identify device characteristics that can support more granular security policies and monitoring. Device awareness can be particularly useful in environments where administrators need to distinguish different endpoint types or categories. This information can contribute to access control and security visibility. Device identification is separate from administrator authentication, IPsec key exchange, and DNS filtering because its primary purpose is understanding connected endpoints.<\/span><\/p>\nQuestion 144. Which FortiGate capability can be used to control access based on a user’s membership in an identity group?<\/b><\/h3>\n\n- <\/b> User group-based firewall policy<\/span>
\n<\/span>2.<\/b> Interface speed setting<\/span>
\n<\/span>3.<\/b> Static ARP entry<\/span>
\n<\/span>4.<\/b> System time zone<\/span><\/li>\n<\/ol>\nAnswer: 1. User group-based firewall policy<\/b><\/p>\n
Explanation:<\/b><\/p>\n
FortiGate firewall policies can use authenticated users or user groups as part of their matching criteria. This allows administrators to apply different access rules depending on group membership. For example, one group may be permitted to access specific internal applications while another group receives different restrictions. User-based policies require appropriate authentication or identity integration so FortiGate can determine the user’s identity. Interface speed, ARP entries, and time-zone settings serve different purposes and do not provide user-group-based access control.<\/span><\/p>\nQuestion 145. What is the main purpose of FortiGate’s ARP table?<\/b><\/h3>\n\n- <\/b> To store mappings between IPv4 addresses and MAC addresses<\/span>
\n<\/span>2.<\/b> To store administrator passwords<\/span>
\n<\/span>3.<\/b> To configure antivirus signatures<\/span>
\n<\/span>4.<\/b> To define web-filter categories<\/span><\/li>\n<\/ol>\nAnswer: 1. To store mappings between IPv4 addresses and MAC addresses<\/b><\/p>\n
Explanation:<\/b><\/p>\n
The ARP table contains mappings between IPv4 addresses and corresponding Layer 2 MAC addresses that FortiGate has learned or configured. These mappings help the device determine where Ethernet frames should be delivered on directly connected networks. Examining the ARP table can be useful when troubleshooting local connectivity, duplicate addresses, or unexpected Layer 2 behavior. It is not a database for administrator passwords, antivirus signatures, or web-filter categories. Understanding ARP is particularly important when diagnosing situations where routing appears correct but local communication still fails.<\/span><\/p>\nQuestion 146. What is the purpose of administrator trusted hosts on FortiGate?<\/b><\/h3>\n\n- <\/b> To define networks from which a specific administrator account is permitted to log in<\/span>
\n<\/span>2.<\/b> To create VPN encryption algorithms<\/span>
\n<\/span>3.<\/b> To inspect application traffic<\/span>
\n<\/span>4.<\/b> To assign DHCP addresses<\/span><\/li>\n<\/ol>\nAnswer: 1. To define networks from which a specific administrator account is permitted to log in<\/b><\/p>\n
Explanation:<\/b><\/p>\n
Administrator trusted hosts restrict administrative access based on the source IP address or network from which a login attempt originates. This provides an additional security layer because valid credentials alone may not be sufficient if the connection comes from an unauthorized network. Trusted hosts can be configured for administrator accounts according to the organization’s management architecture. This control is separate from VPN encryption, application inspection, and DHCP services. Restricting management access to known administrative networks can reduce exposure of the FortiGate management interface.<\/span><\/p>\nQuestion 147. What is the purpose of a FortiGate file filter security profile?<\/b><\/h3>\n\n- <\/b> To identify and control files based on configured file characteristics or types<\/span>
\n<\/span>2.<\/b> To calculate routing metrics<\/span>
\n<\/span>3.<\/b> To create IPsec tunnels<\/span>
\n<\/span>4.<\/b> To synchronize system clocks<\/span><\/li>\n<\/ol>\nAnswer: 1. To identify and control files based on configured file characteristics or types<\/b><\/p>\n
Explanation:<\/b><\/p>\n
A file filter security profile can help administrators control file transfers according to configured criteria. Organizations may use file filtering to restrict certain file types or reduce the risk associated with unwanted content being transferred through network traffic. The feature can complement other security controls such as antivirus and web filtering. Routing metrics, IPsec tunnels, and NTP synchronization address entirely different functions. File filtering is therefore useful when an organization wants an additional layer of control over files transferred through inspected traffic.<\/span><\/p>\nQuestion 148. Which FortiGate feature provides a visual representation of network topology and connected Fortinet devices?<\/b><\/h3>\n\n- <\/b> Security Fabric topology<\/span>
\n<\/span>2.<\/b> DHCP server<\/span>
\n<\/span>3.<\/b> IP pool<\/span>
\n<\/span>4.<\/b> Service object<\/span><\/li>\n<\/ol>\nAnswer: 1. Security Fabric topology<\/b><\/p>\n
Explanation:<\/b><\/p>\n
Security Fabric topology provides visibility into connected Fortinet devices and their relationships within a Security Fabric environment. It can help administrators understand how participating security devices are connected and identify components that may require attention. This centralized visibility is useful in environments containing multiple Fortinet products. A DHCP server provides IP configuration, an IP pool supplies addresses for specific translation requirements, and service objects define protocol or port information. None of these functions primarily provides a graphical representation of the Security Fabric environment.<\/span><\/p>\nQuestion 149. What does FortiGate conserve mode indicate?<\/b><\/h3>\n\n- <\/b> The device is operating under high memory pressure<\/span>
\n<\/span>2.<\/b> The firewall has no active interfaces<\/span>
\n<\/span>3.<\/b> All VPN tunnels have been permanently deleted<\/span>
\n<\/span>4.<\/b> The device has disabled routing<\/span><\/li>\n<\/ol>\nAnswer: 1. The device is operating under high memory pressure<\/b><\/p>\n
Explanation:<\/b><\/p>\n
Conserve mode is associated with high memory usage on a FortiGate. When available memory becomes critically low, FortiGate can take protective measures intended to preserve system stability. Administrators should investigate the source of the memory pressure, which may involve traffic levels, processes, sessions, logs, or other system conditions. Conserve mode does not mean that interfaces have necessarily failed or that routing has been disabled. Monitoring system resources and identifying unusual memory consumption are important steps when a FortiGate enters a memory-constrained state.<\/span><\/p>\nQuestion 150. What is the purpose of FortiGate system resource monitoring?<\/b><\/h3>\n\n- <\/b> To configure user passwords automatically<\/span>
\n<\/span>2.<\/b> To monitor CPU, memory, sessions, and other system resources<\/span>
\n<\/span>3.<\/b> To replace firewall policies<\/span>
\n<\/span>4.<\/b> To generate IPsec certificates automatically<\/span><\/li>\n<\/ol>\nAnswer: 2. To monitor CPU, memory, sessions, and other system resources<\/b><\/p>\n
Explanation:<\/b><\/p>\n
System resource monitoring provides information about the operational condition of the FortiGate. Administrators can examine resources such as CPU utilization, memory usage, active sessions, and other relevant system statistics. This information can help identify resource constraints and investigate performance-related issues. High utilization does not automatically identify a specific root cause, so administrators may need to correlate resource information with traffic, logs, and configuration. Resource monitoring is a diagnostic and operational visibility function rather than a replacement for firewall policies or a certificate-generation mechanism.<\/span><\/p>\nQuestion 151. What is the primary purpose of FortiGate application control?<\/b><\/h3>\n\n- <\/b> To identify and control applications in network traffic<\/span>
\n<\/span>2.<\/b> To assign IP addresses to interfaces<\/span>
\n<\/span>3.<\/b> To synchronize administrator accounts<\/span>
\n<\/span>4.<\/b> To create physical network cables<\/span><\/li>\n<\/ol>\nAnswer: 1. To identify and control applications in network traffic<\/b><\/p>\n
Explanation:<\/b><\/p>\n
Application Control allows FortiGate to identify applications within network traffic and apply configured actions to them. This enables administrators to create policies based on application behavior rather than relying only on IP addresses and ports. Organizations can use application control to allow, monitor, or restrict selected applications according to their security requirements. Proper inspection and policy configuration are important because application identification can depend on the traffic and inspection context. Application Control is therefore focused on application visibility and control, not address assignment or physical connectivity.<\/span><\/p>\nQuestion 152. Which FortiGate setting can be used to provide additional authentication protection for administrators?<\/b><\/h3>\n\n- <\/b> Administrator profile<\/span>
\n<\/span>2.<\/b> Multi-factor authentication<\/span>
\n<\/span>3.<\/b> Service group<\/span>
\n<\/span>4.<\/b> Static route<\/span><\/li>\n<\/ol>\nAnswer: 2. Multi-factor authentication<\/b><\/p>\n
Explanation:<\/b><\/p>\n
Multi-factor authentication adds an additional verification factor beyond a username and password. When enabled for supported administrator authentication workflows, users may need to provide another factor such as a token or verification code. This reduces reliance on passwords alone and can strengthen protection of administrative access. Administrator profiles control permissions after authentication, while service groups and static routes perform unrelated configuration functions. MFA should be combined with other administrative security controls, such as trusted hosts and least-privilege administrator profiles, where appropriate.<\/span><\/p>\nQuestion 153. What is the main purpose of a FortiGate service group?<\/b><\/h3>\n\n- <\/b> To combine multiple service objects into one reusable group<\/span>
\n<\/span>2.<\/b> To combine multiple administrators into one account<\/span>
\n<\/span>3.<\/b> To synchronize VPN certificates<\/span>
\n<\/span>4.<\/b> To monitor CPU usage<\/span><\/li>\n<\/ol>\nAnswer: 1. To combine multiple service objects into one reusable group<\/b><\/p>\n
Explanation:<\/b><\/p>\n
A service group allows multiple service objects to be grouped together so they can be referenced more conveniently in firewall policies. For example, an administrator may create a group containing several TCP or UDP services that are commonly permitted together. This reduces repetitive configuration and can make firewall policies easier to manage. Service groups are different from administrator groups because they represent network services rather than user identities. They also do not perform certificate synchronization or system monitoring. Reusable service objects can improve consistency in firewall policy design.<\/span><\/p>\nQuestion 154. What is the primary purpose of a GRE tunnel?<\/b><\/h3>\n\n- <\/b> To encapsulate one network protocol inside another IP tunnel<\/span>
\n<\/span>2.<\/b> To provide antivirus scanning<\/span>
\n<\/span>3.<\/b> To authenticate administrators<\/span>
\n<\/span>4.<\/b> To allocate DHCP addresses<\/span><\/li>\n<\/ol>\nAnswer: 1. To encapsulate one network protocol inside another IP tunnel<\/b><\/p>\n
Explanation:<\/b><\/p>\n
Generic Routing Encapsulation, or GRE, provides a mechanism for encapsulating network traffic inside an IP tunnel. GRE can be used to transport certain protocols or routing traffic between endpoints across an IP network. GRE itself does not provide encryption, so it may be combined with technologies such as IPsec when confidentiality and integrity protection are required. Antivirus scanning, administrator authentication, and DHCP address assignment are unrelated functions. Understanding GRE is useful when designing networks that require logical tunnels between geographically separated or otherwise connected networks.<\/span><\/p>\nQuestion 155. Which FortiGate feature can help identify and analyze high-volume traffic sources and destinations?<\/b><\/h3>\n\n- <\/b> FortiView<\/span>
\n<\/span>2.<\/b> DHCP relay<\/span>
\n<\/span>3.<\/b> Certificate store<\/span>