最新的SAP Fortinet NSE 4 - FortiOS 7.2 - C-HRHFC-2311免費考試真題
問題1
Refer to the exhibit.
A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, which configuration change will bring phase 2 up?
A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, which configuration change will bring phase 2 up?
正確答案: C
問題2
Refer to the exhibits.
The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) for Facebook .
Users are given access to the Facebook web application. They can play video content hosted on Facebook but they are unable to leave reactions on videos or other types of posts.
Which part of the policy configuration must you change to resolve the issue?
The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) for Facebook .
Users are given access to the Facebook web application. They can play video content hosted on Facebook but they are unable to leave reactions on videos or other types of posts.
Which part of the policy configuration must you change to resolve the issue?
正確答案: A
說明：（僅 VCESoft 成員可見）
問題3
An organization requires remote users to send external application data running on their PCs and access FTP resources through an SSL/TLS connection.
Which FortiGate configuration can achieve this goal?
Which FortiGate configuration can achieve this goal?
正確答案: A
說明：（僅 VCESoft 成員可見）
問題4
Which two statements are correct about NGFW Policy-based mode? (Choose two.)
正確答案: B,D
問題5
Which two statements are true about the RPF check? (Choose two.)
正確答案: A,C
問題6
Which two protocol options are available on the CLI but not on the GUI when configuring an SD-WAN Performance SLA? (Choose two.)
正確答案: A,D
問題7
Which statement describes a characteristic of automation stitches?
正確答案: A
說明：（僅 VCESoft 成員可見）
問題8
Refer to the exhibit.
Which contains a session diagnostic output. Which statement is true about the session diagnostic output?
Which contains a session diagnostic output. Which statement is true about the session diagnostic output?
正確答案: D
說明：（僅 VCESoft 成員可見）
問題9
Which two types of traffic are managed only by the management VDOM? (Choose two.)
正確答案: A,C
問題10
Which CLI command will display sessions both from client to the proxy and from the proxy to the servers?
正確答案: C
問題11
Refer to the exhibits to view the firewall policy (Exhibit A) and the antivirus profile (Exhibit B).
Which statement is correct if a user is unable to receive a block replacement message when downloading an infected file for the first time?
Which statement is correct if a user is unable to receive a block replacement message when downloading an infected file for the first time?
正確答案: C
說明：（僅 VCESoft 成員可見）
問題12
What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?
正確答案: C
問題13
Refer to the exhibit.
The exhibit contains the configuration for an SD-WAN Performance SLA, as well as the output of diagnose sys virtual-wan-link health-check . Which interface will be selected as an outgoing interface?
The exhibit contains the configuration for an SD-WAN Performance SLA, as well as the output of diagnose sys virtual-wan-link health-check . Which interface will be selected as an outgoing interface?
正確答案: A
說明：（僅 VCESoft 成員可見）
