GoConqr hat ein neues Design! Sag uns, wie es dir gefällt.

Kostenlos registrieren

Quiz

LAB 2 - Firewall Policies Quiz

Marcos Avila 10 Fragen 5,0 (2 Bewertungen)

Quiz starten

Fragen in diesem Quiz (10)

  1. 1What statement is true regarding the Policy Lookup feature?
    1. ASearches matching policy based on input criteria
    2. BAllows traffic to pass through FortiGate based on input criteria, even when there is no firewall policy allowing it
    3. CEnables extended logging on the firewall policy based on input criteria
    4. DCreates packet capture in Wireshark format based on input criteria
  2. 2Which FortiGate interface does source device type enable device detection on?
    1. ABoth source interface and destination interface of the firewall policy
    2. BAll interfaces of FortiGate
    3. CDestination interface of the firewall policy only
    4. DSource interface of the firewall policy only
  3. 3Which statements are true regarding device identification? (Choose two.)
    1. AAgent-based (FortiCIient) devices use the HTTP user-agent header to identify devices.
    2. BAgentless devices are indexed by their MAC address.
    3. CAgent-based (FortiCIient) devices are tracked by their FortiCIient unique ID
    4. DOnly agent—based device identification techniques are supported.
  4. 4Which statements correctly define Policy ID and policy Sequence number for firewall policies? (Choose two.)
    1. AA policy sequence number defines the order in which rules are processed.
    2. BA policy ID number is required to modify a firewall policy from the CLI.
    3. CA policy ID number changes when policies are re-ordered.
    4. DA policy sequence number reflects the number of objects used in the firewall policy.
  5. 5Which statements are true regarding incoming and outgoing interfaces in firewall policies? (Choose two.)
    1. AMultiple interfaces can be selected as incoming and outgoing interfaces.
    2. BAn incoming interface is mandatory in a firewall policy, but an outgoing interface is optional.
    3. COnly the any interface can be chosen as an incoming interface.
    4. DA zone can be chosen as the outgoing interface.
  6. 6Examine the CLI configuration. What does this configuration do? (Choose two.)
    config system setting
    set ses—denied—traffic enable
    end
    1. AIt creates a session for traffic being denied.
    2. BIt sends an alert notification to the administrator upon detecting denied traffic.
    3. CIt reduces the amount of logs generated by denied traffic.
    4. DA log message will only generate if there is a security event.
  7. 7What criteria does FortiGate use to match traffic to a firewall policy? (Choose two.)
    1. ASource and destination interfaces
    2. BLogging settings
    3. CSecurity profiles
    4. DNetwork services
  8. 8Which statements are true regarding the By Sequence View for firewall policies? (Choose two.)
    1. ADoes not show the source interface column
    2. Bls still available even when the any interface is being used in one or more firewall policies
    3. CLists firewall policies primarily by their policy sequence number
    4. Dls disabled if any firewall policy has its status set to disable
  9. 9What must be selected in the Source field of a firewall policy?
    1. AAt least one source user or user group object
    2. BAt least one address object
    3. CAt least one device object
    4. DAt least one source user, one source device, and one source address object
  10. 10What statement is true regarding the Service setting in a firewall policy?
    1. AIt is optional to add a service in a firewall policy.
    2. BIt matches the traffic by port number.
    3. COnly one service object can be added to the firewall policy.
    4. DAdministrators cannot create custom services objects.

Informationen

Beschreibung
Fortigate Quiz am LAB 2 - Firewall Policies Quiz, erstellt von Marcos Avila am 20/10/2017.
Sprache
Español
Aufrufe
357
Schlagwörter
fortigate
Bewertung
5,0 von 5 · 2 Bewertungen
Bewerte dieses Quiz
Bewerte dieses Quiz

Feedback

Worum geht es?

Wie gefällt dir das neue Design?

Dein Eindruck