SAP Fortinet NSE 4 - FortiOS 7.2 - C_HRHFC_2311 模擬練習
Refer to the exhibit.
The global settings on a FortiGate device must be changed to align with company security policies. What does the Administrator account need to access the FortiGate global settings?
The global settings on a FortiGate device must be changed to align with company security policies. What does the Administrator account need to access the FortiGate global settings?
正解: A
Which of the following are purposes of NAT traversal in IPsec? (Choose two.)
正解: A,D
An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)
正解: A,B,C
解説: (PassTest メンバーにのみ表示されます)
To complete the final step of a Security Fabric configuration, an administrator must authorize all the devices on which device?
正解: C
If the Services field is configured in a Virtual IP (VIP), which statement is true when central NAT is used?
正解: C
An organization requires remote users to send external application data running on their PCs and access FTP resources through an SSL/TLS connection.
Which FortiGate configuration can achieve this goal?
Which FortiGate configuration can achieve this goal?
正解: A
解説: (PassTest メンバーにのみ表示されます)
Refer to the exhibit.
The exhibit contains a network diagram, virtual IP, IP pool, and firewall policies configuration.
The WAN (port1) interface has the IP address 10.200. 1. 1/24.
The LAN (port3) interface has the IP address 10 .0.1.254. /24.
The first firewall policy has NAT enabled using IP Pool.
The second firewall policy is configured with a VIP as the destination address.
Which IP address will be used to source NAT the internet traffic coming from a workstation with the IP address 10.0. 1. 10?
The exhibit contains a network diagram, virtual IP, IP pool, and firewall policies configuration.
The WAN (port1) interface has the IP address 10.200. 1. 1/24.
The LAN (port3) interface has the IP address 10 .0.1.254. /24.
The first firewall policy has NAT enabled using IP Pool.
The second firewall policy is configured with a VIP as the destination address.
Which IP address will be used to source NAT the internet traffic coming from a workstation with the IP address 10.0. 1. 10?
正解: C
解説: (PassTest メンバーにのみ表示されます)
Which two statements are true about the RPF check? (Choose two.)
正解: C,D
What are two functions of the ZTNA rule? (Choose two.)
正解: A,B
解説: (PassTest メンバーにのみ表示されます)
Which of the following statements about backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)
正解: C,D
Refer to the exhibit.
Based on the raw log, which two statements are correct? (Choose two.)
Based on the raw log, which two statements are correct? (Choose two.)
正解: A,D
An administrator has a requirement to keep an application session from timing out on port 80. What two changes can the administrator make to resolve the issue without affecting any existing services running through FortiGate? (Choose two.)
正解: B,D
Refer to the exhibit.
The exhibit shows the IPS sensor configuration.
If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)
The exhibit shows the IPS sensor configuration.
If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)
正解: C,D
Which statement about the policy ID number of a firewall policy is true?
正解: B
Which three CLI commands can you use to troubleshoot Layer 3 issues if the issue is in neither the physical layer nor the link layer? (Choose three.)
正解: A,B,D