An administrator wants to make sure their servers are protected against zero-day attacks.
Which FortiADC feature would they configure to accomplish this?
A. Advanced health checks
B. Advanced WVS
C. Signature-based IPS
D. Advanced WAF
A web administrator wants to configure a new virtual server to deliver HTTP content to end users.
Which three components are mandatory to accomplish this? (Choose three.)
A. Load balancing method
B. Real server pool
C. Server persistence
D. Health check
E. Application profile
Refer to the exhibit.
FortiADC is applying SNAT to all inbound traffic going to the servers. When an attack occurs, FortiWeb blocks traffic based on the 192.0.2.1 source IP address, which belongs to FortiADC. The setup is breaking all connectivity and genuine clients are not able to access the servers.
What must the administrator do to avoid this problem? (Choose two.)
A. Enable the Use X-Forwarded-For setting on FortiWeb.
B. No Special configuration is required; connectivity will be re-established after the set timeout.
C. Place FortiWeb in front of FortiADC.
D. Enable the Add X-Forwarded-For setting on FortiWeb.
In global load balancing, why might an administrator configure the response rate limit in FortiADC?
A. To redirect requests from a blocked county
B. To prevent FortiADG from being used in DNS amplification DoS attacks
C. To protect back-end servers from SYN flood attacks D. To prioritize outgoing traffic by sending it through the link with the lowed response time
An administrator wants to implement load balancing persistence by configuring FortiADC to prefix the server ID to an existing cookie sent by the back-end servers. Which persistence method should the administrator use?
A. Hash cookie
B. Insert cookie
C. Persistence cookie
D. Embedded cookie
Refer to the exhibit.
The exhibit shows the first few lines of three scripts, and a virtual server configuration leveraging these scripts.
Based on the way FortiADC prioritizes script execution, in what order will the scripts execute?
A. COOKIE_COMMANDS, GENERAL_REDIRECT, GEOIP_UTILITY
B. COOKIE_COMMANDS< GEOIP_UTILITY, GENERAL_REDIRECT
C. GEOIP_UTILITY, GENERAL_ REDIRECT, COOKIE_COMMAND
Which two FortiADC features can you um to harden the device and server security? (Choose two.)
A. Connection limits
B. Web filtering
C. Antivirus scanning
D. FortiGuard IP reputation
To which two objects can link policies apply in FortiADC? (Choose two.)
A. Virtual tunnel
B. Virtual server
C. Gateway
D. Link group
Refer to the exhibits.
Which show the HA configurations for two FortiADC devices
If both FortiADC devices are operational, which FortiADC is the active device in the cluster?
A. The FortiADC with the highest HA uptime value
B. The FortiADC with the highest sorting serial number
C. FortiADC-1
D. FortiADC-2
Which two statements about virtual tunneling for outbound link load balancing are true? (Choose two.)
A. Link policies are used to specify which traffic is sent through each virtual tunnel.
B. Each virtual tunnel can contain no more than three IP tunnel.
C. Two dispatch algorithms are supported weighted round robin and source destination hash.
D. A virtual tunnel can combine point to point and multipoint IP tunnels.