FORTIADC Online Practice Questions and Answers

For the case of outbound link load balancing, which upstream link is elected by the proximity route dynamic detection feature as the best one for a destination IP address?

A. The link with the lowest round-trip delay to the destination IP address

B. The link with the lowest number of sessions

C. The link with the lowest traffic utilization

D. The link with the lowest number of packets lost

Two FortiADC devices (ADC-1 and ADC-2) form an HA cluster. The following exhibits shows the HA configuration for both FortiADC devices:

If both FortiADC devices are up and operational. which FortiADC is the HA active FortiADC?

A. FortiADC-2

B. The FortiADC that has the highest-sorting serial number

C. FortiADC-1

D. The FortiADC that has the highest HA uptime value

Which of the following statements best describe what a SYN cookie does when a SYN packet is received?

A. It replies with a RST packet if the SYN packet doesn't contain the right cookie in the sequence field.

B. It sends a SYN/ACK with a cookie in the sequence field.

C. It replies with a SYN/ACK packet containing a cookie value in the TCP acknowledge field.

D. It replies with two SYN/ACK packets. One containing the right acknowledge value, and one containing a wrong acknowledge value.

Two FortiADC devices form an HA cluster. What information can be synchronized between both FortiADC devices? (Choose three.)

A. SNMP system information

B. Layer 4 persistence pickup

C. RAID settings

D. Layer 4 session pickup

E. HTTP persistence pickup

What actions can a FortiADC take for HTTP traffic that is coming from an IP address that is blacklisted in the FortiGuard IP reputation database? (Choose two.)

A. Redirect the traffic to a different URL

B. Apply a stricter profile to the traffic

C. Forward the traffic to FortiAnalyzer

D. Block the traffic

Which of the following statements about layer 2 load balancing are true? (Choose two.)

A. HTTP content can be modified

B. It's useful when the real IP addresses of the back-end servers are unknown by the FortiADC administrator.

C. Load balancing decisions are made based on the destination MAC address of the client traffic.

D. It supports IPv6.

Which of these is a security feature specific to FortiADC global load balancing? (Choose two.)

A. Virtual tunnel

B. Web application firewall

C. DNS forwarding

D. DNSSEC

An administrator is running the following sniffer in a FortiADC:

What information is included in the output of the sniffer? (Choose two.)

A. IP headers

B. Ethernet headers

C. IP payload

D. Port names

An administrator has configured all the back-end servers with a maximum warm-up state rate. Under which conditions is the maximum rate enforced by the FortiADC? (Choose two.)

A. When the status of a server is set to Enabled from Maintain or Disabled

B. When multiple health check methods have been configured for a server and some of them are failing but at least one is up

C. During a warm-up period, when a server is back online after a health check downtime

D. As long as a server keeps replying to the health check

Two FortiADC devices from an HA cluster. What information can be synchronized between both FortiADC devices? (Choose three.)

A. Layer 4 persistence pickup

B. Layer 4 session pickup

C. HTTP persistence pickup

D. SNMP system information

E. RAID settings