FORTIADC Online Practice Questions and Answers

To which of these objects can link policies apply in FortiADC? (Choose two.)

A. Link group

B. Gateway

C. Virtual tunnel

D. Virtual server

Which configuration elements must be in place for the FortiADC global load balancing feature to discover from local FortiADC server load balancers the virtual servers that can be included in the GLB virtual server pools? (Choose two.)

A. Servers

B. Hosts

C. Data centers

D. Address groups

Two FortiADC devices (ADC-1 and ADC-2) form an HA cluster. The following exhibits shows the HA configuration for both FortiADC devices:

If both FortiADC devices are up and operational. which FortiADC is the HA active FortiADC?

A. FortiADC-2

B. The FortiADC that has the highest-sorting serial number

C. FortiADC-1

D. The FortiADC that has the highest HA uptime value

Which of the following statements best describe what a SYN cookie does when a SYN packet is received?

A. It replies with a RST packet if the SYN packet doesn't contain the right cookie in the sequence field.

B. It sends a SYN/ACK with a cookie in the sequence field.

C. It replies with a SYN/ACK packet containing a cookie value in the TCP acknowledge field.

D. It replies with two SYN/ACK packets. One containing the right acknowledge value, and one containing a wrong acknowledge value.

Which of the following statements best describes the differences between layer 4 load balancing and layer 7 load balancing? (Choose three.)

A. Layer 7 load balancing can make balancing decisions faster than layer 4 load balancing.

B. Layer 4 load balancing supports IPv6; Layer 7 load balancing doesn't.

C. Layer 7 load balancing proxies the TCP session, Layer 4 load balancing doesn't.

D. Layer 7 load balancing can modify the HTTP content; Layer 4 load balancing can't.

E. Layer 7 load balancing inspection is lower than layer 4 load balancing inspection.

What actions can a FortiADC take for HTTP traffic that is coming from an IP address that is blacklisted in the FortiGuard IP reputation database? (Choose two.)

A. Redirect the traffic to a different URL

B. Apply a stricter profile to the traffic

C. Forward the traffic to FortiAnalyzer

D. Block the traffic

Which settings are included in the global load balancing general DNS settings? (Choose two.)

A. Management traffic

B. Default zone configurations

C. Recursion

D. Response rate limit

Which of the following statements about layer 2 load balancing are true? (Choose two.)

A. HTTP content can be modified

B. It's useful when the real IP addresses of the back-end servers are unknown by the FortiADC administrator.

C. Load balancing decisions are made based on the destination MAC address of the client traffic.

D. It supports IPv6.

Which of these is a security feature specific to FortiADC global load balancing? (Choose two.)

A. Virtual tunnel

B. Web application firewall

C. DNS forwarding

D. DNSSEC

Which FortiADC features can be used to harden the device and server security? (Choose two.)

A. Web filtering

B. FortiGuard IP reputation

C. Connection limits

D. Antivirus scanning