新建题库09010228_在线真题试卷与模拟练习_新建题库09010228

更新时间：试题数量：购买人数：提供作者：

有效期：个月

章节介绍：共有个章节

我的练习

我的错题
(0道)

我的收藏
(0道)

我的斩题
(0道)

我的笔记
(0道)

专项练习

顺序练习 0 / 0

随机练习 自定义设置练习量

题型乱序 按导入顺序练习

模拟考试 仿真模拟

题型练习 按题型分类练习

易错题 精选高频易错题

学习资料 考试学习相关信息

搜索

题库预览

1.Refer to the exhibit.

（含图）

Examine the intrusion prevention system (IPS) diagnostic command shown in the exhibit.

If option 5 is used with the IPS diagnostic command and the outcome is a decrease in the CPU usage,

what is the correct conclusion?

2.Refer to the exhibits, which show the firewall policy and an antivirus profile configuration.

（含图）

Why is the user unable to receive a block replacement message when downloading an infected file

for the first time?

Which two statements about equal-cost multi-path (ECMP) configuration on FortiGate are

true? (Choose two.)

4.Which two features of IPsec IKEv1 authentication are supported by FortiGate? (Choose two.)

5.Refer to the exhibits.

（含图）

The exhibits show a diagram of a FortiGate device connected to the network, and the firewall configuration.

An administrator created a Deny policy with default settings to deny Webserver access for Remote-

User2.

The policy should work such that Remote-User1 must be able to access the Webserver while

preventing Remote-User2 from accessing the Webserver.

Which two configuration changes can the administrator make to the policy to deny Webserver access

for Remote-User2? (Choose two.)

6.FortiGate is integrated with FortiAnalyzer and FortiManager.

When a firewall policy is created, which attribute is added to the policy to improve functionality and

to support recording logs to FortiAnalyzer or FortiManager?

7.An organization requires remote users to send external application data running on their PCs

and access FTP resources through an SSUTLS connection.

Which FortiGate configuration can achieve this goal?

8.Which statement about the deployment of the Security Fabric in a multi-VDOM environment is true?

9.Which two statements are true regarding FortiGate HA configuration synchronization? (Choose

two.)

A network administrator enabled antivirus and selected an SSL inspection profile on a firewall

Policy.

When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the file.

When downloading the same file through HTTPS, FortiGate does not detect the and does not block

The file allowing it to be downloaded.

The administrator confirms that the traffic matches the configured firewall policy.

What are two reasons for the failed virus detection by FortiGate? (Choose two.)

11.An administrator has configured the following settings:

（含图）

What are the two results of this configuration? (Choose two.)

A FortiGate Firewall policy is configured with active authentication however, the user Cannot authenticate when accessing a website. Which protocol must FortiGate allow even though the user cannot Authenticate?

Which three Pieces of information does FortiGate use to identify the hostname of the SSL Server when SSL certificate inspection is enabled? (Choose three.)

A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes.All traffic must be routed through the primary tunnel when both tunnels are up. The secondary tunnel must be used only if the primary tunnel goes down. In addition, FortiGate should be able to detect a dead tunnel to speed up tunnel failover. Which two key configuration changes must the administrator make on FortiGate to meet the requirements? (Choose two.)

Refer to the exhibits.

（含图）

The exhibits show a diagram of a FortiGate device connected to the Network, as well as the IP pool

Configuration and firewall policy objects.

The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port3) interface has the IPaddress 10.0.1.254/24.

Which IP address will be used to source NAT (SNAT) the traffic, if the User on Local-Client (10.0.1.10) Pings the IP address of Remote-FortiGate (10.200.3.1)?

16.Refer to the exhibit to view the firewall policy.

（含图）

Why would the firewall policy not block a well-known virus, for example eicar?

Which two statements explain antivirus scanning modes? (Choose two.)

（含图）

18.Refer to the exhibit.

The administrator configured SD-WAN rules and set the FortiGate traffic log page to display SD-WAN-

specific columns: SD-WAN Quality and SD-WAN Rule Name.

FortiGate allows the traffic according to policy ID 1. This is the policy that allows SD-WAN traffic.

Despite these settings the traffic logs do not show the name of the SD-WAN rule used to steer those

traffic flows.What can be the reason?

19.Refer to the exhibits, which show the firewall policy and the security profile for Facebook.

（含图）

Users are given access to the Facebook web application. They can play video content hosted on

Facebook but they are unable to leave reactions on videos or other types of posts.

Which part of the configuration must you change to resolve the issue?

20 Refer to the exhibits

（含图）（含图）

The SSL VPN connection fails when a user attempts to connect to it.

What should the user do to successfully connect to the SSL VPN?

1 2 3 4 5