MODULE 4

Question 1

What features require SSL deep inspection?

Answer 1

Split DNS
AV
Web filtering inline CASB
File Filter
DLP
App Control with CASB

Question 2

For SSL deep inspection, what must be set on the FortiSASE certification >

Answer 2

cA=True
KeyUsage=keyCertSign which indicates the key can sign certs

Question 3

What is the default action when a website returns a rating error?

Answer 3

It blocks the site, you can change this to allow.

Question 4

What is the difference between allow and exempt for static URL filtering?

Answer 4

Allow passes onto the next filtering process

Exempt bypasses all of them.

Question 5

Does SWG mode support DNS filter?

Answer 5

No

Question 6

For DNS filter, what is DNS translation?

Answer 6

DNS translation is translating to a different IP

Question 7

What is MPIP?

Answer 7

Microsoft Purview Information Protection

Question 8

Does SWG mode support Endpoint protection?

Answer 8

No, as it needs forticlient!

Question 9

How many rules does a client need to meet to be considered on-fabric?

Answer 9

All of them.

Question 10

What can be submitted to FortiSandbox?

Answer 10

Removable media
mapped network drives
downloaded files
all email downloads