Test
SSL-VPN
Preguntas del test (26)
1La mayoria de las VPNs son SSL o IPsec, FortiOS soporta ambas, incluso las mas debiles en seguridad como PPTP.
- AVerdadero
- BFalso
2SSL resides higher upon the network stack than IP and; therefore, it usually requires less bits—less bandwidth—for SSL-VPN headers.
- AVerdadero
- BFalso
3lPsec uses some special protocols. The primary protocol is ESP, which encapsulates and encrypts UDP, RDP, HTTP, or other protocols that are inside in the lPsec tunnel.
- AVerdadero
- BFalso
4?
- ASSL-VPN
- BIPsec VPN
5?
- ASSL
- BIPsec
6What does a VPN do?
- AA. Extends a private network across a public network
- BB. Protects a network from external attacks
7Which statements about lPsec and SSL VPNs are true?
- AA. Either an SSL-VPN or an lPsec VPN can be established between two FortiGate devices.
- BB. Either an SSL-VPN or an lPsec VPN can be established between an end-user workstation and a FortiGate device.
8SSL - VPN deployment modes
- ATunnel mode
Web mode - BWeb tunnel mode
- ATunnel mode
9Requires only a web browser
Supports a limited number of protocols:
- Citrix, FTP, HTTP/HTTPS, Port Forward, RDP, SMB/CIFS, SSH, Telnet, VNC, and Ping- ATunnel mode
- BWeb mode
10Accessed through a standalone client
Requires a virtual adapter on the client’s host- ATunnel mode
- BWeb mode
11Web access is the simplest SSL-VPN mode.
- AVerdadero
- BFalso
12All traffic routes through an SSL-VPN tunnel to a remote FortiGate, then to the destination. This includes Internet traffic.
An egress firewall policy is required.
Traffic inspection and security features are applied.- ASplit tunneling disabled
- BSplit tunneling enabled
13Only traffic destined for the private network is routed through the remote FortiGate.
Internet traffic uses the local gateway; unencrypted route.
Conserves bandwidth and alleviates bottlenecks.- ASplit tunneling disable
- BSplit tunneling enabled
14A web-mode SSL-VPN user connects to a remote web server. What’s the source IP address of the HTTP request the web server receives?
- AA. The remote user's IP address
- BB. The FortiGate device's internal IP address
15Which statements about tunnel-mode SSL-VPN are correct?
- AA. It supports split tunneling.
- BB. It requires a bookmarks.
16A web-mode SSL-VPN user accesses internal network resources by using :
- AA. Bookmarks
- BB. FortiClient
17Which of the following steps is necessary to configure SSL-VPN connections?
- AA. Create firewall policies to and from the SSL-VPN interface.
- BB. Enable event logs for SSL-VPN traffic: users, VPN, and endpoints.
18What action may allow Internet access to SSL-VPN users in tunnel mode if the remote network does not have Internet access?
- AA. Enable split tunneling
- BB. Configure the DNS server to use the same as the client’s system DNS.
19?
- ASSL-VPN Realms
- BSSL-VPN Personal bookmarks
20Which statement about SSL-VPN realms is correct?
- AA. Allow access to different SSL-VPN portals by user groups.
- BB. Allow unlimited concurrent SSL-VPN users.
21Which FortiGate interface allows administrators to create user-specific bookmarks?
- AA. Command line interface (CLI)
- BB. Graphical user interface (GUI)
22Why is it necessary to run a client integrity check (host—chec k)?
- AA. To check whether specific security software is running on SSL-VPN users’ computers
- BB. To check whether a specific security certificate is running on SSL-VPN users’ web browsers
23Which security action restricts SSL-VPN connections from users located in a specific country or region?
- AA. Restricting hosts by MAC address
- BB. Restricting hosts by IP address
24To view the status of SSL-VPN acceleration, use the following command:
- Aget vpn status ssl hw-acceleration-status
- Bget vpn ssl status hw-acceleration
25What does the SSL-VPN monitor feature allow you to do?
- AA. Monitor SSL-VPN user actions, such as authentication.
- BB. Force SSL-VPN user disconnections.
26Which statements about SSL-VPN timers are correct?
- AA. SSL-VPN timers can avoid logouts when SSL-VPN users experience long network latency.
- BB. The login timeout is a non-customizable hard value.
Información
- Descripción
- El usuario ha eliminado su información de asignaturas Test sobre SSL-VPN, creado por Usuario eliminado el 20/09/2018.
- Autor
- Usuario eliminado
- Idioma
- English
- Visitas
- 34
- Historial
- Creado el 20 sep 2018 · actualizado el 11 abr 2019
- Etiquetas