Q12. Refer to the exhibit.

FortiADC is applying SNAT to all inbound traffic going to the servers. When an attack occurs, FortiWeb blocks traffic based on the 192.0.2.1 source IP address, which belongs to FortiADC. The setup is breaking all connectivity and genuine clients are not able to access the servers.
What must the administrator do to avoid this problem? (Choose two.)

Q13. An administrator has configured all the back end servers with a maximum warm-up state rate.
Under which two conditions is the maximum rate enforced by FortiADC? (Choose two.)

Q14. An administrator has learned that some of the corporate web servers were exploited using SQL injection attacks.
What should the administrator do to verify their web servers are not susceptible to the exploits?

Q15. When configuring aFortiADC configuration backup, which two options are available for designating a storage location for the configuration file? (Choose two.)

Q16. An organization has decided to automate specific tasks by leveraging the fortiADC REST API. The tasks will perform updates to existing items.
Which REST API method should you use to update existing items on FortiADC?

Q17. To which two objects can link policies apply in FortiADC? (Choose two.)

Q18. An administrator is running the following sniffer on FortiADC:
Diagnose sniffer packet any ”port80” 2
What two pieces of information are included in the output of the sniffer? (Choose two.)

Q19. An administrator wants to make sure their servers are protected against zero-day attacks.
Which FortiADC feature would they configure to accomplish this?

Q20. Refer to the exhibits.


Which show the HA configurations for two FortiADC devices
If both FortiADC devices are operational, which FortiADC is the active device in the cluster?

Q21. An administrator wants to implement load balancing persistence by configuring FortiADC to prefix the server ID to an existing cookie sent by the back-end servers.
Which persistence method should the administrator use?

Q22. A FortiADC administrator wants to offload SSL encryption and decryption of web traffic to lessen overhead on the real servers, while maintaining SSL encryption with the client.
Which must be true to allow FortiADC to provide this capability?

Q23. Which two actions can FortiADC take with the GeoIP block list when receiving requests from a blocked country’s address space? (Choose two.)