Free EMEA-Advanced-Support Exam Braindumps
Fortinet EMEA Advanced Support Questions 11–15 (page: 4)

Updated On: 10-Feb-2026

Which statement is true about IPsec VPNs and SSL VPNs?

  1. SSL VPN creates a HTTPS connection. IPsec does not
  2. Both SSL VPNs and IPsec VPNs are standard protocols
  3. Either a SSL VPN or an IPsec VPN can be established between an end-user workstation and a FortiGate device
  4. All of the above

Answer(s): D



How does a stateful firewall control a TCP session?

  1. TCP ack numbers are used to control the session
  2. TCP source ports are used to control the session
  3. TCP destination ports are used to control the session
  4. TCP sequence numbers and TCP flags are used to control the session

Answer(s): D



Client is connected to firewall via link with MTU 1500 bytes, server is connected to firewall via link with MTU 1496 bytes. The firewall is rewriting both sender and receiver tcp-mss to 1450 bytes.
What maximum size of IP packets are we going to see when client connects to server?

  1. 1500 bytes
  2. 1496 bytes
  3. 1500 bits
  4. 1496 bits
  5. 1450 bytes
  6. 1450 bits

Answer(s): E



Firewall is performing stateful inspection for TCP traffic between Client 10.0.0.21 and Server 172.16.1.200.

  1. The ACK was not supposed to be sent to client 10.0.0.21
  2. Traffic is Asymmetric and not allowed by the Firewall
  3. Traffic should be allowed
  4. Three way handshake was not completed

Answer(s): D



A firewall receives an out-of-order packet in a TCP session after the FIN/ACK and the packet is dropped as expected.
What parameter can be changed to prevent such drops?

  1. TCP close-wait timer
  2. TCP time-wait timer
  3. Enable TCP option
  4. TCPMSS

Answer(s): B



Viewing page 4 of 11
Viewing questions 16 - 20 out of 50 questions


Post your Comments and Discuss Fortinet EMEA-Advanced-Support exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!