サンプル問題 1： Which two methods are supported for importing user defined Lookup Table Data into the FortiSIEM? (Choose two.)
A: Report
B: FTP
C: API
D: SCP
正解：A, C
Explanation: FortiSIEM supports two methods for importing user defined Lookup Table Data: Report: You can import lookup table data from a report. This is the most common method for importing lookup table data. API: You can also import lookup table data using the FortiSIEM API. This is a more advanced method that allows you to import lookup table data programmatically. FTP, SCP, and other file transfer protocols are not supported for importing lookup table data into FortiSIEM. Reference: https://help.fortinet.com/fsiem/6-7-4/Online-Help/HTML5_Help/importing_lookup_table_data.htm
サンプル問題 2： You are troubleshooting a FortiMail Cloud service integrated with Office 365 where outgoing emails are not reaching the recipients' mail What are two possible reasons for this problem? (Choose two.)
A: The FortiMail access control rule to relay from Office 365 servers FQDN is missing.
B: The FortiMail DKIM key was not set using the Auto Generation option.
C: The FortiMail access control rules to relay from Office 365 servers public IPs are missing.
D: A Mail Flow connector from the Exchange Admin Center has not been set properly to the FortiMail Cloud FQD
正解：A, C
Explanation: A. The FortiMail access control rule to relay from Office 365 servers FQDN is missing. If the access control rule to relay from Office 365 servers FQDN is missing, then FortiMail will not be able to send emails to Office 365. This is because the access control rule specifies which IP addresses or domains are allowed to relay emails through FortiMail. D. A Mail Flow connector from the Exchange Admin Center has not been set properly to the FortiMail Cloud FQDN. If the Mail Flow connector from the Exchange Admin Center is not set properly to the FortiMail Cloud FQDN, then Office 365 will not be able to send emails to FortiMail. This is because the Mail Flow connector specifies which SMTP server is used to send emails to external recipients.
サンプル問題 3： SD-WAN is configured on a FortiGate. You notice that when one of the internet links has high latency the time to resolve names using DNS from FortiGate is very high. You must ensure that the FortiGate DNS resolution times are as low as possible with the least amount of work. What should you configure?
A: Configure local out traffic to use the outgoing interface based on SD-WAN rules with a manual defined IP associated to a loopback interface and configure an SD-WAN rule from the loopback to the DNS server.
B: Configure an SD-WAN rule to the DNS server and use the FortiGate interface IPs in the source address.
C: Configure two DNS servers and use DNS servers recommended by the two internet providers.
D: Configure local out traffic to use the outgoing interface based on SD-WAN rules with the interface IP and configure an SD-WAN rule to the DNS server.
正解：D
Explanation: SD-WAN is a feature that allows users to optimize network performance and reliability by using multiple WAN links and applying rules based on various criteria, such as latency, jitter, packet loss, etc. One way to ensure that the FortiGate DNS resolution times are as low as possible with the least amount of work is to configure local out traffic to use the outgoing interface based on SD-WAN rules with the interface IP and configure an SD-WAN rule to the DNS server. This means that the FortiGate will use the best WAN link available to send DNS queries to the DNS server according to the SD-WAN rule, and use its own interface IP as the source address. This avoids NAT issues and ensures optimal DNS performance. Reference: https://docs.fortinet.com/document/fortigate/7.0.0/sd-wan/19662/sd-wan
