新建题库09010228_在线真题试卷与模拟练习_新建题库09010228

更新时间：试题数量：购买人数：提供作者：

有效期：个月

章节介绍：共有个章节

我的练习

我的错题
(0道)

我的收藏
(0道)

我的斩题
(0道)

我的笔记
(0道)

专项练习

顺序练习 0 / 0

随机练习 自定义设置练习量

题型乱序 按导入顺序练习

模拟考试 仿真模拟

题型练习 按题型分类练习

易错题 精选高频易错题

学习资料 考试学习相关信息

搜索

题库预览

An employee needs to connect to the office through a High-latency internet connection. Which SSL VPN setting should the administrator adjust to prevent SSL VPN negotiation failure?

22.Refer to the exhibit which contains a RADIUS server configuration.

An administrator added a configuration for a new RADIUS server. While configuring, the

administrator selected the Include in every user group option.

What is the impact of using the Include in every user group option in a RADIUS configuration?

（含图）

23Refer to the exhibit.

（含图）

The exhibit shows a diagram of a FortiGate device connected to the network, the firewall policy and VIP configuration on the FortiGate device, and the routing table on the ISP router. When the administrator tries to access the web server public address (203.0.113.2) from the internet, the connection times out. At the same time the administrator runs a sniffer on FortiGate to capture incoming web traffic to the server and does not see any output. Based on the information shown in the exhibit, what configuration change must the administrator make to fix the connectivity issue?

There are multiple dial-up IPsec VPNs configured in aggressive mode on the HQ FortiGate. The requirement is to connect dial-up users to their respective department VPN tunnels. Which phase 1 setting you can configure to match the user to the tunnel?

FortiGuard categories can be overridden and defined in different categories. To create a web rating override for the example.com home page the override must be configured using a specific syntax. Which two syntaxes are correct to configure a web rating override for the home page? (Choose two.)

Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI. （含图）Based on the exhibit, which statement is true?

Refer to exhibit.

（含图）

An administrator configured the web filtering profile shown in the exhibit to block access to all social networking sites except Twitter.

However, when users try to access twitter.com, they are redirected to a FortiGuard web filtering block page.Based on the exhibit, which

configuration change can the administrator make to allow Twitter while blocking all other social networking sites?

A network administrator has configured an SSL/SSH inspection profile defined for full SSL inspection and set with a private CA certificate. The firewall policy that allows the traffic uses this profile for SSL inspection and performs web filtering. When visiting any HTTPS websites, the browser reports certificate warning errors. What is the reason for the certificate warning errors?

Which three strategies are valid SD-WAN rule strategies for member selection? (Choose three.)

30.An administrator is configuring an IPsec VPN between site A and site B. The Remote Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192.168.1.0/24 and the remote quick mode selector is 192.168.2.0/24. Which subnet must the administrator configure for the local quick mode selector for site B?

Refer to the exhibits.

（含图）

（含图）The exhibits show the application sensor configuration and the Excessive-Bandwidth and Apple filter details. Based on the configuration,

what will happen to Apple FaceTime if there are only a few calls originating or incoming?

An administrator has configured a strict RPF check on FortiGate. How does strict RPF check work?

Refer to the exhibit.

（含图）

Which two statements are true about the routing entries in this database table? (Choose two.)

What are three key routing principles in SD-WAN? (Choose three.)

Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

The HTTP inspection process in web filtering follows a specific order when multiple features are enabled in the web filter profile. Which order must FortiGate use when the web filter profile has features such as safe search enabled?

What are two features of the NGFW profile-based mode? (Choose two.)

Refer to the exhibit. Based on the routing database shown in the exhibit which two conclusions can you make about the Routes? (Choose two.)（含图）

39Refer to the exhibits, which show a diagram of a FortiGate device connected to the network. VIP object

configuration, and the firewall policy configuration.

（含图）

（含图）（含图）

The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port3) interface has the IP

address 10.0.1.254/24.

If the host 10.200.3.1 sends a TCP SYN packet on port 8080 to 10.200.1.10, what will the source

address, destination address, and destination port of the packet be at the time FortiGate forwards

the packet to the destination?

Refer to the exhibit,

（含图）which shows the IPS sensor configuration.

If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)

1 2 3 4 5