15095172
Descrição
Quiz por Marcos Avila, atualizado more than 1 year ago
|
Criado por Marcos Avila
mais de 5 anos atrás
|
|
Questão 1
Questão
La mayoria de las VPNs son SSL o IPsec, FortiOS soporta ambas, incluso las mas debiles en seguridad como PPTP.
Responda
- True
- False
Questão 2
Questão
SSL resides higher upon the network stack than IP and; therefore, it usually requires less bits—less bandwidth—for SSL-VPN headers.
Responda
- True
- False
Questão 3
Questão
lPsec uses some special protocols. The primary protocol is ESP, which encapsulates and encrypts UDP, RDP, HTTP, or other protocols that are inside in the lPsec tunnel.
Responda
- True
- False
Questão 4
Responda
-
SSL-VPN
-
IPsec VPN
Questão 5
Responda
-
SSL
-
IPsec
Questão 6
Questão
What does a VPN do?
Responda
-
A. Extends a private network across a public network
-
B. Protects a network from external attacks
Questão 7
Questão
Which statements about lPsec and SSL VPNs are true?
Responda
-
A. Either an SSL-VPN or an lPsec VPN can be established between two FortiGate devices.
-
B. Either an SSL-VPN or an lPsec VPN can be established between an end-user workstation and a FortiGate device.
Questão 8
Questão
SSL - VPN deployment modes
Responda
-
Tunnel mode Web mode
-
Web tunnel mode
Questão 9
Questão
Requires only a web browser
Supports a limited number of protocols:
- Citrix, FTP, HTTP/HTTPS, Port Forward, RDP, SMB/CIFS, SSH, Telnet, VNC, and Ping
Responda
-
Tunnel mode
-
Web mode
Questão 10
Questão
Accessed through a standalone client
Requires a virtual adapter on the client’s host
Responda
-
Tunnel mode
-
Web mode
Questão 11
Questão
Web access is the simplest SSL-VPN mode.
Responda
- True
- False
Questão 12
Questão
All traffic routes through an SSL-VPN tunnel to a remote FortiGate, then to the destination. This includes Internet traffic.
An egress firewall policy is required.
Traffic inspection and security features are applied.
Responda
-
Split tunneling disabled
-
Split tunneling enabled
Questão 13
Questão
Only traffic destined for the private network is routed through the remote FortiGate.
Internet traffic uses the local gateway; unencrypted route.
Conserves bandwidth and alleviates bottlenecks.
Responda
-
Split tunneling disable
-
Split tunneling enabled
Questão 14
Questão
A web-mode SSL-VPN user connects to a remote web server. What’s the source IP address of the HTTP request the web server receives?
Responda
-
A. The remote user's IP address
-
B. The FortiGate device's internal IP address
Questão 15
Questão
Which statements about tunnel-mode SSL-VPN are correct?
Responda
-
A. It supports split tunneling.
-
B. It requires a bookmarks.
Questão 16
Questão
A web-mode SSL-VPN user accesses internal network resources by using :
Responda
-
A. Bookmarks
-
B. FortiClient
Questão 17
Questão
Which of the following steps is necessary to configure SSL-VPN connections?
Responda
-
A. Create firewall policies to and from the SSL-VPN interface.
-
B. Enable event logs for SSL-VPN traffic: users, VPN, and endpoints.
Questão 18
Questão
What action may allow Internet access to SSL-VPN users in tunnel mode if the remote network does not have Internet access?
Responda
-
A. Enable split tunneling
-
B. Configure the DNS server to use the same as the client’s system DNS.
Questão 19
Responda
-
SSL-VPN Realms
-
SSL-VPN Personal bookmarks
Questão 20
Questão
Which statement about SSL-VPN realms is correct?
Responda
-
A. Allow access to different SSL-VPN portals by user groups.
-
B. Allow unlimited concurrent SSL-VPN users.
Questão 21
Questão
Which FortiGate interface allows administrators to create user-specific bookmarks?
Responda
-
A. Command line interface (CLI)
-
B. Graphical user interface (GUI)
Questão 22
Questão
Why is it necessary to run a client integrity check (host—chec k)?
Responda
-
A. To check whether specific security software is running on SSL-VPN users’ computers
-
B. To check whether a specific security certificate is running on SSL-VPN users’ web browsers
Questão 23
Questão
Which security action restricts SSL-VPN connections from users located in a specific country or region?
Responda
-
A. Restricting hosts by MAC address
-
B. Restricting hosts by IP address
Questão 24
Questão
To view the status of SSL-VPN acceleration, use the following command:
Responda
-
get vpn status ssl hw-acceleration-status
-
get vpn ssl status hw-acceleration
Questão 25
Questão
What does the SSL-VPN monitor feature allow you to do?
Responda
-
A. Monitor SSL-VPN user actions, such as authentication.
-
B. Force SSL-VPN user disconnections.
Questão 26
Questão
Which statements about SSL-VPN timers are correct?
Responda
-
A. SSL-VPN timers can avoid logouts when SSL-VPN users experience long network latency.
-
B. The login timeout is a non-customizable hard value.
Quer criar seus próprios Quizzes gratuitos com a GoConqr? Saiba mais.