최신 C_HRHFC_2311 무료덤프 - SAP Fortinet NSE 4

문제1

Which feature in the Security Fabric takes one or more actions based on event triggers?

A. Security Rating

B. Logical Topology

C. Automation Stitches

D. Fabric Connectors

정답: C

문제2

What is a reason for triggering IPS fail open?

A. The IPS socket buffer is full and the IPS engine cannot process additional packets.

B. The IPS engine is upgraded.

C. The IPS engine cannot decode a packet.

D. The administrator enabled NTurbo acceleration.

정답: A

문제3

An administrator has a requirement to keep an application session from timing out on port 80. What two changes can the administrator make to resolve the issue without affecting any existing services running through FortiGate? (Choose two.)

A. Create a new firewall policy with the new HTTP service and place it above the existing HTTP policy.

B. Set the TTL value to never under config system-ttl

C. Set the session TTL on the HTTP policy to maximum

D. Create a new service object for HTTP service and set the session TTL to never

정답: B,D

문제4

If Internet Service is already selected as Destination in a firewall policy, which other configuration object can be selected for the Destination field of a firewall policy?

A. FQDN address

B. IP address

C. User or User Group

D. No other object can be added

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제5

Which three CLI commands can you use to troubleshoot Layer 3 issues if the issue is in neither the physical layer nor the link layer? (Choose three.)

A. execute traceroute

B. execute ping

C. get system arp

D. diagnose sniffer packet any

E. diagnose sys top

정답: A,B,D

문제6

Refer to the exhibits.
Exhibit A shows a network diagram. Exhibit B shows the firewall policy configuration and a VIP object configuration.
The WAN (port1) interface has the IP address 10.200.1.1/24.
The LAN (port3) interface has the IP address 10.0.1.254/24.
The administrator disabled the WebServer firewall policy.

Which IP address will be used to source NAT the traffic, if a user with address 10.0.1.10 connects over SSH to the host with address 10.200.3.1?

A. 10.200.3.1

B. 10.200.1.1

C. 10.0.1.254

D. 10.200.1.10

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제7

Which statement about the policy ID number of a firewall policy is true?

A. It represents the number of objects used in the firewall policy.

B. It changes when firewall policies are reordered.

C. It defines the order in which rules are processed.

D. It is required to modify a firewall policy using the CLI.

정답: D

문제8

You have enabled logging on a FortiGate device for event logs and all security logs, and you have set up logging to use the FortiGate local disk.
What is the default behavior when the local disk is full?

A. Logs are overwritten and the only warning is issued when log disk use reaches the threshold of 95%.

B. No new log is recorded after the warning is issued when log disk use reaches the threshold of 95%.

C. Logs are overwritten and the first warning is issued when log disk use reaches the threshold of 75%.

D. No new log is recorded until you manually clear logs from the local disk.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제9

Which timeout setting can be responsible for deleting SSL VPN associated sessions?

A. SSL VPN dtls-hello-timeout

B. SSL VPN login-timeout

C. SSL VPN idle-timeout

D. SSL VPN http-request-body-timeout

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

최신 C_HRHFC_2311 무료덤프 - SAP Fortinet NSE 4 - FortiOS 7.2

우리와 연락하기

유용한 링크

최신 업데이트