GoConqr hat ein neues Design! Sag uns, wie es dir gefällt.

Kostenlos registrieren

Quiz

Q_3

Marcos Avila 25 Fragen

Quiz starten

Fragen in diesem Quiz (25)

  1. 1What inspection mode does FortiGate use if it is configured as a policy-based next-generation firewall (NGFW)?
    1. A• A. Full Content inspection
    2. B• B. Proxy-based inspection
    3. C• C. Certificate inspection
    4. D• D. Flow-based inspection
  2. 2Which two statements are true when FortiGate is in transparent mode? (Choose two.)
    1. A• A. By default, all interfaces are part of the same broadcast domain.
    2. B• B. The existing network IP schema must be changed when installing a transparent mode FortiGate in the network.
    3. C• C. Static routes are required to allow traffic to the next hop.
    4. D• D. FortiGate forwards frames without changing the MAC address.
  3. 3In the command diagnose sniffer packet, what filter can you use to capture the traffic between the client and the explicit web proxy?
    Refer to the exhibit.
    The exhibits show a network diagram and the explicit web proxy configuration.

    In the command diagnose sniffer packet, what filter can you use to capture the traffic between the client and the explicit web proxy?
    Bild zu Frage 3
    1. AA . ‘host 192.168.0.2 and port 8080’
    2. BB . ‘host 10.0.0.50 and port 80’
    3. CC . ‘host 192.168.0.1 and port 80’
    4. DD . ‘host 10.0.0.50 and port 8080’
  4. 4
    What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?
    1. AA . It limits the scope of application control to the browser-based technology category only.
    2. BB . It limits the scope of application control to scan application traffic based on application category only.
    3. CC . It limits the scope of application control to scan application traffic using parent signatures only
    4. DD . It limits the scope of application control to scan application traffic on DNS protocol only.
  5. 5Examine the network diagram shown in the exhibit, then answer the following question:
    Which one of the following routes is the best candidate route for FGT1 to route traffic from the Workstation to the Web server?    Bild zu Frage 5
    1. AA . 172.16.0.0/16 [50/0] via 10.4.200.2, port2 [5/0]
    2. BB . 0.0.0.0/0 [20/0] via 10.4.200.2, port2
    3. CC . 10.4.200.0/30 is directly connected, port2
    4. DD . 172.16.32.0/24 is directly connected, port1
  6. 6Exhibit A shows system performance output. Exhibit B shows a FortiGate configured with the default configuration of high memory usage thresholds.

    Based on the system performance output, which two statements are correct? (Choose two.)
    Bild zu Frage 6
    1. AA . Administrators can access FortiGate only through the console port.
    2. BB . FortiGate has entered conserve mode.
    3. CC . FortiGate will start sending all files to FortiSandbox for inspection.
    4. DD . Administrators cannot change the configuration.
  7. 7Which statement is correct if a user is unable to receive a block replacement message when downloading an infected file for the first time?Bild zu Frage 7
    1. AA . The firewall policy performs the full content inspection on the file.
    2. BB . The flow-based inspection is used, which resets the last packet to the user.
    3. CC . The volume of traffic being inspected is too high for this model of FortiGate.
    4. DD . The intrusion prevention security profile needs to be enabled when using flow-based inspection mode.
  8. 8Which two statements ate true about the Security Fabric rating? (Choose two.)
    1. AA . It provides executive summaries of the four largest areas of security focus.
    2. BB . Many of the security issues can be fixed immediately by clicking Apply where available.
    3. CC . The Security Fabric rating must be run on the root FortiGate device in the Security Fabric.
    4. DD . The Security Fabric rating is a free service that comes bundled with alt FortiGate devices.
  9. 9If the Services field is configured in a Virtual IP (VIP), which statement is true when central NAT is used?
    1. AA . The Services field prevents SNAT and DNAT from being combined in the same policy.
    2. BB . The Services field is used when you need to bundle several VIPs into VIP groups.
    3. CC . The Services field removes the requirement to create multiple VIPs for different services.
    4. DD . The Services field prevents multiple sources of traffic from using multiple services to connect to a single computer.
  10. 10If the Issuer and Subject values are the same in a digital certificate, which type of entity was the certificate issued to?
    1. AA . A CRL
    2. BB . A person
    3. CC . A subordinate CA
    4. DD . A root CA

Informationen

Beschreibung
Soporte Tecnico NSE4 6.4 Quiz am Q_3, erstellt von Marcos Avila am 30/03/2022.
Sprache
Español
Aufrufe
0
Schlagwörter
nse4 6.4soporte tecnico
Bewertung
Noch keine Bewertungen
Bewerte dieses Quiz
Bewerte dieses Quiz

Feedback

Worum geht es?

Wie gefällt dir das neue Design?

Dein Eindruck