Quiz

SSL-VPN

Deleted user 26 questions Updated 11 Apr 2019

Take the quiz

Questions in this quiz (26)

1La mayoria de las VPNs son SSL o IPsec, FortiOS soporta ambas, incluso las mas debiles en seguridad como PPTP.
1. ATrue
2. BFalse
2SSL resides higher upon the network stack than IP and; therefore, it usually requires less bits—less bandwidth—for SSL-VPN headers.
1. ATrue
2. BFalse
3lPsec uses some special protocols. The primary protocol is ESP, which encapsulates and encrypts UDP, RDP, HTTP, or other protocols that are inside in the lPsec tunnel.
1. ATrue
2. BFalse
4?
1. ASSL-VPN
2. BIPsec VPN
5?
1. ASSL
2. BIPsec
6What does a VPN do?
1. AA. Extends a private network across a public network
2. BB. Protects a network from external attacks
7Which statements about lPsec and SSL VPNs are true?
1. AA. Either an SSL-VPN or an lPsec VPN can be established between two FortiGate devices.
2. BB. Either an SSL-VPN or an lPsec VPN can be established between an end-user workstation and a FortiGate device.
8SSL - VPN deployment modes
1. ATunnel mode
  Web mode
2. BWeb tunnel mode
9Requires only a web browser
Supports a limited number of protocols:
- Citrix, FTP, HTTP/HTTPS, Port Forward, RDP, SMB/CIFS, SSH, Telnet, VNC, and Ping
1. ATunnel mode
2. BWeb mode
10Accessed through a standalone client
Requires a virtual adapter on the client’s host
1. ATunnel mode
2. BWeb mode

11Web access is the simplest SSL-VPN mode.
1. ATrue
2. BFalse
12All trafﬁc routes through an SSL-VPN tunnel to a remote FortiGate, then to the destination. This includes Internet traffic.
An egress firewall policy is required.
Traffic inspection and security features are applied.
1. ASplit tunneling disabled
2. BSplit tunneling enabled
13Only trafﬁc destined for the private network is routed through the remote FortiGate.
Internet trafﬁc uses the local gateway; unencrypted route.
Conserves bandwidth and alleviates bottlenecks.
1. ASplit tunneling disable
2. BSplit tunneling enabled
14A web-mode SSL-VPN user connects to a remote web server. What’s the source IP address of the HTTP request the web server receives?
1. AA. The remote user's IP address
2. BB. The FortiGate device's internal IP address
15Which statements about tunnel-mode SSL-VPN are correct?
1. AA. It supports split tunneling.
2. BB. It requires a bookmarks.
16A web-mode SSL-VPN user accesses internal network resources by using :
1. AA. Bookmarks
2. BB. FortiClient
17Which of the following steps is necessary to configure SSL-VPN connections?
1. AA. Create ﬁrewall policies to and from the SSL-VPN interface.
2. BB. Enable event logs for SSL-VPN trafﬁc: users, VPN, and endpoints.
18What action may allow Internet access to SSL-VPN users in tunnel mode if the remote network does not have Internet access?
1. AA. Enable split tunneling
2. BB. Conﬁgure the DNS server to use the same as the client’s system DNS.
19?
1. ASSL-VPN Realms
2. BSSL-VPN Personal bookmarks
20Which statement about SSL-VPN realms is correct?
1. AA. Allow access to different SSL-VPN portals by user groups.
2. BB. Allow unlimited concurrent SSL-VPN users.
21Which FortiGate interface allows administrators to create user-specific bookmarks?
1. AA. Command line interface (CLI)
2. BB. Graphical user interface (GUI)
22Why is it necessary to run a client integrity check (host—chec k)?
1. AA. To check whether specific security software is running on SSL-VPN users’ computers
2. BB. To check whether a specific security certiﬁcate is running on SSL-VPN users’ web browsers
23Which security action restricts SSL-VPN connections from users located in a specific country or region?
1. AA. Restricting hosts by MAC address
2. BB. Restricting hosts by IP address
24To view the status of SSL-VPN acceleration, use the following command:
1. Aget vpn status ssl hw-acceleration-status
2. Bget vpn ssl status hw-acceleration
25What does the SSL-VPN monitor feature allow you to do?
1. AA. Monitor SSL-VPN user actions, such as authentication.
2. BB. Force SSL-VPN user disconnections.
26Which statements about SSL-VPN timers are correct?
1. AA. SSL-VPN timers can avoid logouts when SSL-VPN users experience long network latency.
2. BB. The login timeout is a non-customizable hard value.

Information

Description: User has deleted their subject information Quiz on SSL-VPN, created by Deleted user on 20/09/2018.
Author: Deleted user
Language: English
Views: 34
History: Created on 20 Sep 2018 · updated on 11 Apr 2019
Tags: user has deleted their subject information

SSL-VPN

Questions in this quiz (26)

Information

Feedback

What do you think of the new look?