O GoConqr está de visual novo! Conte para nós o que você achou.

Registre-se grátis

Quiz

Q_3

Marcos Avila 25 perguntas

Fazer o quiz

Perguntas do quiz (25)

  1. 1What inspection mode does FortiGate use if it is configured as a policy-based next-generation firewall (NGFW)?
    1. A• A. Full Content inspection
    2. B• B. Proxy-based inspection
    3. C• C. Certificate inspection
    4. D• D. Flow-based inspection
  2. 2Which two statements are true when FortiGate is in transparent mode? (Choose two.)
    1. A• A. By default, all interfaces are part of the same broadcast domain.
    2. B• B. The existing network IP schema must be changed when installing a transparent mode FortiGate in the network.
    3. C• C. Static routes are required to allow traffic to the next hop.
    4. D• D. FortiGate forwards frames without changing the MAC address.
  3. 3In the command diagnose sniffer packet, what filter can you use to capture the traffic between the client and the explicit web proxy?
    Refer to the exhibit.
    The exhibits show a network diagram and the explicit web proxy configuration.

    In the command diagnose sniffer packet, what filter can you use to capture the traffic between the client and the explicit web proxy?
    Imagem da pergunta 3
    1. AA . ‘host 192.168.0.2 and port 8080’
    2. BB . ‘host 10.0.0.50 and port 80’
    3. CC . ‘host 192.168.0.1 and port 80’
    4. DD . ‘host 10.0.0.50 and port 8080’
  4. 4
    What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?
    1. AA . It limits the scope of application control to the browser-based technology category only.
    2. BB . It limits the scope of application control to scan application traffic based on application category only.
    3. CC . It limits the scope of application control to scan application traffic using parent signatures only
    4. DD . It limits the scope of application control to scan application traffic on DNS protocol only.
  5. 5Examine the network diagram shown in the exhibit, then answer the following question:
    Which one of the following routes is the best candidate route for FGT1 to route traffic from the Workstation to the Web server?    Imagem da pergunta 5
    1. AA . 172.16.0.0/16 [50/0] via 10.4.200.2, port2 [5/0]
    2. BB . 0.0.0.0/0 [20/0] via 10.4.200.2, port2
    3. CC . 10.4.200.0/30 is directly connected, port2
    4. DD . 172.16.32.0/24 is directly connected, port1
  6. 6Exhibit A shows system performance output. Exhibit B shows a FortiGate configured with the default configuration of high memory usage thresholds.

    Based on the system performance output, which two statements are correct? (Choose two.)
    Imagem da pergunta 6
    1. AA . Administrators can access FortiGate only through the console port.
    2. BB . FortiGate has entered conserve mode.
    3. CC . FortiGate will start sending all files to FortiSandbox for inspection.
    4. DD . Administrators cannot change the configuration.
  7. 7Which statement is correct if a user is unable to receive a block replacement message when downloading an infected file for the first time?Imagem da pergunta 7
    1. AA . The firewall policy performs the full content inspection on the file.
    2. BB . The flow-based inspection is used, which resets the last packet to the user.
    3. CC . The volume of traffic being inspected is too high for this model of FortiGate.
    4. DD . The intrusion prevention security profile needs to be enabled when using flow-based inspection mode.
  8. 8Which two statements ate true about the Security Fabric rating? (Choose two.)
    1. AA . It provides executive summaries of the four largest areas of security focus.
    2. BB . Many of the security issues can be fixed immediately by clicking Apply where available.
    3. CC . The Security Fabric rating must be run on the root FortiGate device in the Security Fabric.
    4. DD . The Security Fabric rating is a free service that comes bundled with alt FortiGate devices.
  9. 9If the Services field is configured in a Virtual IP (VIP), which statement is true when central NAT is used?
    1. AA . The Services field prevents SNAT and DNAT from being combined in the same policy.
    2. BB . The Services field is used when you need to bundle several VIPs into VIP groups.
    3. CC . The Services field removes the requirement to create multiple VIPs for different services.
    4. DD . The Services field prevents multiple sources of traffic from using multiple services to connect to a single computer.
  10. 10If the Issuer and Subject values are the same in a digital certificate, which type of entity was the certificate issued to?
    1. AA . A CRL
    2. BB . A person
    3. CC . A subordinate CA
    4. DD . A root CA

Informações

Descrição
Soporte Tecnico NSE4 6.4 Quiz sobre Q_3, criado por Marcos Avila em 30-03-2022.
Idioma
Español
Visualizações
0
Etiquetas
nse4 6.4soporte tecnico
Avaliação
Ainda sem avaliações
Avalie este quiz
Avalie este quiz

Fale Conosco

Sobre o que é sua mensagem?

O que você acha do novo visual?

Você gostou?