Quiz
SSL-VPN
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (26)
1La mayoria de las VPNs son SSL o IPsec, FortiOS soporta ambas, incluso las mas debiles en seguridad como PPTP.
- ATrue
- BFalse
2SSL resides higher upon the network stack than IP and; therefore, it usually requires less bits—less bandwidth—for SSL-VPN headers.
- ATrue
- BFalse
3lPsec uses some special protocols. The primary protocol is ESP, which encapsulates and encrypts UDP, RDP, HTTP, or other protocols that are inside in the lPsec tunnel.
- ATrue
- BFalse
4?
- ASSL-VPN
- BIPsec VPN
5?
- ASSL
- BIPsec
6What does a VPN do?
- AA. Extends a private network across a public network
- BB. Protects a network from external attacks
7Which statements about lPsec and SSL VPNs are true?
- AA. Either an SSL-VPN or an lPsec VPN can be established between two FortiGate devices.
- BB. Either an SSL-VPN or an lPsec VPN can be established between an end-user workstation and a FortiGate device.
8SSL - VPN deployment modes
- ATunnel mode
Web mode - BWeb tunnel mode
- ATunnel mode
9Requires only a web browser
Supports a limited number of protocols:
- Citrix, FTP, HTTP/HTTPS, Port Forward, RDP, SMB/CIFS, SSH, Telnet, VNC, and Ping- ATunnel mode
- BWeb mode
10Accessed through a standalone client
Requires a virtual adapter on the client’s host- ATunnel mode
- BWeb mode
11Web access is the simplest SSL-VPN mode.
- ATrue
- BFalse
12All traffic routes through an SSL-VPN tunnel to a remote FortiGate, then to the destination. This includes Internet traffic.
An egress firewall policy is required.
Traffic inspection and security features are applied.- ASplit tunneling disabled
- BSplit tunneling enabled
13Only traffic destined for the private network is routed through the remote FortiGate.
Internet traffic uses the local gateway; unencrypted route.
Conserves bandwidth and alleviates bottlenecks.- ASplit tunneling disable
- BSplit tunneling enabled
14A web-mode SSL-VPN user connects to a remote web server. What’s the source IP address of the HTTP request the web server receives?
- AA. The remote user's IP address
- BB. The FortiGate device's internal IP address
15Which statements about tunnel-mode SSL-VPN are correct?
- AA. It supports split tunneling.
- BB. It requires a bookmarks.
16A web-mode SSL-VPN user accesses internal network resources by using :
- AA. Bookmarks
- BB. FortiClient
17Which of the following steps is necessary to configure SSL-VPN connections?
- AA. Create firewall policies to and from the SSL-VPN interface.
- BB. Enable event logs for SSL-VPN traffic: users, VPN, and endpoints.
18What action may allow Internet access to SSL-VPN users in tunnel mode if the remote network does not have Internet access?
- AA. Enable split tunneling
- BB. Configure the DNS server to use the same as the client’s system DNS.
19?
- ASSL-VPN Realms
- BSSL-VPN Personal bookmarks
20Which statement about SSL-VPN realms is correct?
- AA. Allow access to different SSL-VPN portals by user groups.
- BB. Allow unlimited concurrent SSL-VPN users.
21Which FortiGate interface allows administrators to create user-specific bookmarks?
- AA. Command line interface (CLI)
- BB. Graphical user interface (GUI)
22Why is it necessary to run a client integrity check (host—chec k)?
- AA. To check whether specific security software is running on SSL-VPN users’ computers
- BB. To check whether a specific security certificate is running on SSL-VPN users’ web browsers
23Which security action restricts SSL-VPN connections from users located in a specific country or region?
- AA. Restricting hosts by MAC address
- BB. Restricting hosts by IP address
24To view the status of SSL-VPN acceleration, use the following command:
- Aget vpn status ssl hw-acceleration-status
- Bget vpn ssl status hw-acceleration
25What does the SSL-VPN monitor feature allow you to do?
- AA. Monitor SSL-VPN user actions, such as authentication.
- BB. Force SSL-VPN user disconnections.
26Which statements about SSL-VPN timers are correct?
- AA. SSL-VPN timers can avoid logouts when SSL-VPN users experience long network latency.
- BB. The login timeout is a non-customizable hard value.
Information
- Description
- NSE4 6.0 NSE4 6.0 Quiz on SSL-VPN, created by Marcos Avila on 13/09/2018.
- Author
- Marcos Avila
- Language
- Español
- Views
- 500
- Tags
- Rating
- No ratings yet Rate this quiz