GoConqr has a new look! Let us know what you think.

Sign up free

Quiz

App Control

Marcos Avila 16 questions

Take the quiz

This quiz has question types that open in the usual player.

Questions in this quiz (16)

  1. 1Which statement about the application control database is true?
    1. Aa. The application control database is separate from the IPS database.
    2. Bb. The application control database must be updated manually.
  2. 2The application control profile consists of three different types of filters: (Select 3)
    1. ACategories
    2. BApplication overrides
    3. CFilter overrides
    4. DDeny
    5. EAllow
    6. FMonitor
  3. 3QUIC is a protocol from Google. Instead of using the standard TCP connections for web access it uses UDP which is not scanned by the web filtering. Allowing QUIC instructs FortiGate to inspect Google Chrome packets for a QUIC header and generate logs as a QUIC message. Blocking QUIC forces Google Chrome to use HTTP2/TLS1.2 and FortiGate to log the QUIC as blocked. The default action for QUIC is
    1. AAllow
    2. BBlock.
  4. 4Then, FortiGate scans packets for matches, in this order, for the application control profile:

    [blank_start]3. Categories:[blank_end] Finally, the application control profile applies the action that you've configured for applications in your selected Categories.

    [blank_start]1. Application Overrides:[blank_end] If you have configured any Application Overrides, the application control profile considers those first. it looks for a matching override starting at the top of the list, like firewall policies.

    [blank_start]2. Filter Overrides:[blank_end] If no matching application override exists, then the application control profile applies the action based on configured Filter Overrides.

    1. A3. Categories:
    2. B1. Application Overrides:
    3. C2. Filter Overrides:
  5. 5Application control profile actions: (Choose 4)
    1. AAllow
    2. BMonitor
    3. CBlock
    4. DQuarantine
    5. EWarning
    6. FDefault
    7. GLog only
  6. 6Which statement about application control is true?
    1. AA. It uses the IPS engine to scan traffic for application patterns.
    2. BB. It is unable to scan P2P architecture traffic.
  7. 7App control three different types of filters
    1. ACategories
    2. BApplication overrides
    3. CFilter overrides
    4. DSignatures overrides
  8. 8Allowing QUIC instructs FortiGate to inspect Google Chrome packets for a QUIC header and generate logs as a QUIC message. *Allow QUIC forces Google Chrome to use HTTP2/TLS1.2 and FortiGate to log the QUIC as blocked. The default action for QUIC is *Allow.
    1. AFalse
    2. BTrue
  9. 9Scanning order
    1. ACategories > Application overrides > Filter overrides
    2. BApplication overrides > Categories > Filter overrides
    3. CApplication overrides > Filter overrides > Categories
  10. 10Which statement about application control in NGFW policy-based configuration is true?
    1. AA. Applications are applied directly to the firewall policies.
    2. BB. The application control profile must be applied to firewall policies.

Information

Description
NSE4 6.0 NSE4 6.0 Quiz on App Control, created by Marcos Avila on 17/08/2018.
Language
Español
Views
768
Rating
No ratings yet
Rate this quiz
Rate this quiz

Feedback

What is it about?

What do you think of the new look?

How do you like it?