Question 1

Refer to the exhibit.

An administrator is deploying a hub and spokes network and using OSPF as dynamic protocol. Which configuration is mandatory for neighbor adjacency?

Options :

A : Set bfd enable in the router configuration

B : Set network-type point-to-multipoint in the hub interface

C : Set rfc1583-compatible enable in the router configuration

D : Set virtual-link enable in the hub interface

Answer: B

Question 2

Which two statements about OCVPN are true? (Choose two.)

Options :

A : Only root vdom supports OCVPN.

B : OCVPN supports static and dynamic IPs in WAN interface.

C : OCVPN offers only Hub-Spoke VPNs.

D : FortiGate devices under different FortiCare accounts can be used to form OCVPN.

Answer: A,B

Question 3

Refer to the exhibit, which shows the HA status of an active-passive cluster.

An administrator wants FortiGate_B to handle the Core2 VDOM traffic. Which modification must the administrator apply to achieve this?

Options :

A : The administrator must disable override on FortiGate_A.

B : The administrator must change the priority from 100 to 160 for FortiGate_B.

C : The administrator must change the load balancing method on FortiGate_B.

D : The administrator must change the priority from 128 to 200 for FortiGate_B.

Answer: D

Question 4

Refer to the exhibit, which contains the output of a debug command.

Which two statements about the exhibit are true? (Choose two.)

Options :

A : The local FortiGate OSPF router ID is 0.0.0.4.

B : The local FortiGate is the backup designated router.

C : In the network connected to port4, two OSPF routers are down.

D : Port4 is connected to the OSPF backbone area.

Answer: A,D

Question 5

Refer to the exhibit, which shows a network diagram showing the addition of site 2 with an overlapping network segment to the existing VPN IPsec connection between the hub and site 1.

Which IPsec phase 2 configuration must an administrator make on the FortiGate hub to enable equal-cost multi-path (ECMP) routing when multiple remote sites connect with overlapping subnets?

Options :

A : Set route-overlap to either use-new or use-old

B : Set net-device to ecmp

C : Set single-source to enable

D : Set route-overlap to allow

Answer: A

Free FCSS_EFW_AD-7.4 Mock Exam – Practice Online Confidently

Buying Options: