최신 C-HRHFC-2311 무료덤프 - SAP Fortinet NSE 4

문제1

Which statement describes a characteristic of automation stitches?

A. They can be created on any device in the fabric.

B. They can be run only on devices in the Security Fabric.

C. They can have one or more triggers.

D. They can run multiple actions simultaneously.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제2

Which statement about the IP authentication header (AH) used by IPsec is true?

A. AH does not provide any data integrity or encryption.

B. AH provides strong data integrity but weak encryption.

C. AH does not support perfect forward secrecy.

D. AH provides data integrity bur no encryption.

정답: D

문제3

Refer to the exhibit showing a debug flow output.

Which two statements about the debug flow output are correct? (Choose two.)

A. The debug flow is of ICMP traffic.

B. The default route is required to receive a reply.

C. A new traffic session is created.

D. A firewall policy allowed the connection.

정답: A,C

문제4

When a firewall policy is created, which attribute is added to the policy to support recording logs to a FortiAnalyzer or a FortiManager and improves functionality when a FortiGate is integrated with these devices?

A. Universally Unique Identifier

B. Sequence ID

C. Log ID

D. Policy ID

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제5

Examine this FortiGate configuration:

How does the FortiGate handle web proxy traffic coming from the IP address 10.2.1.200 that requires authorization?

A. It authenticates the traffic using the authentication scheme SCHEME1.

B. It authenticates the traffic using the authentication scheme SCHEME2.

C. It always authorizes the traffic without requiring authentication.

D. It drops the traffic.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제6

View the exhibit.

Which of the following statements are correct? (Choose two.)

A. This setup requires at least two firewall policies with the action set to IPsec.

B. This is a redundant IPsec setup.

C. Dead peer detection must be disabled to support this type of IPsec setup.

D. The TunnelB route is the primary route for reaching the remote site. The TunnelA route is used only if the TunnelB VPN is down.

정답: B,D

설명: (DumpTOP 회원만 볼 수 있음)

문제7

Which three security features require the intrusion prevention system (IPS) engine to function? (Choose three.)

A. Web application firewall

B. Antivirus in flow-based inspection

C. Web filter in flow-based inspection

D. Application control

E. DNS filter

정답: B,C,D

설명: (DumpTOP 회원만 볼 수 있음)

문제8

Refer to the exhibit.

Examine the intrusion prevention system (IPS) diagnostic command.
Which statement is correct If option 5 was used with the IPS diagnostic command and the outcome was a decrease in the CPU usage?

A. The IPS engine was blocking all traffic.

B. The IPS engine will continue to run in a normal state.

C. The IPS engine was unable to prevent an intrusion attack .

D. The IPS engine was inspecting high volume of traffic.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제9

Which two types of traffic are managed only by the management VDOM? (Choose two.)

A. Traffic shaping

B. PKI

C. FortiGuard web filter queries

D. DNS

정답: C,D

설명: (DumpTOP 회원만 볼 수 있음)

문제10

Which two statements are correct about a software switch on FortiGate? (Choose two.)

A. All interfaces in the software switch share the same IP address

B. Can act as a Layer 2 switch as well as a Layer 3 router

C. It can be configured only when FortiGate is operating in NAT mode

D. It can group only physical interfaces

정답: A,C

최신 C-HRHFC-2311 무료덤프 - SAP Fortinet NSE 4 - FortiOS 7.2

우리와 연락하기

유용한 링크

최신 업데이트