최신SAP Fortinet NSE 4 - FortiOS 7.2 - C-HRHFC-2311무료샘플문제

A. 10.200. 1.49

B. 10.200. 1.99

C. 10.200. 1. 149

D. 10.200. 1. 1

A. It is required to modify a firewall policy using the CLI.

B. It represents the number of objects used in the firewall policy.

C. It defines the order in which rules are processed.

D. It changes when firewall policies are reordered.

A. It limits the scanning of application traffic to use parent signatures only.

B. It limits the scanning of application traffic to the DNS protocol only.

C. It limits the scanning of application traffic to the browser-based technology category only.

D. It limits the scanning of application traffic to the application category only.

A. It always authorizes the traffic without requiring authentication.

B. It drops the traffic.

C. It authenticates the traffic using the authentication scheme SCHEME2.

D. It authenticates the traffic using the authentication scheme SCHEME1.

A. A change in the virtual IP address happens when a FortiGate device joins or leaves the cluster.

B. Virtual IP addresses are used to distinguish between cluster members.

C. Heartbeat interfaces have virtual IP addresses that are manually assigned.

D. The primary device in the cluster is always assigned IP address 169.254.0.1.

A. IP tool references must be removed from existing firewall policies before enabling central NAT .

B. Central NAT can be enabled or disabled from the CLI only.

C. Source NAT, using central NAT, requires at least one central SNAT policy.

D. Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall.

A. set webfilter-cache disable

B. set webfilter-force-off disable

C. set protocol tcp

D. set fortiguard-anycast disable

A. The keyUsage extension must be set to keyCertSign.

B. The issuer must be a public CA.

C. The common name on the subject field must use a wildcard name.

D. The CA extension must be set to TRUE.

A. The port3 default route has the lowest metric.

B. The ports default route has the highest distance.

C. There will be eight routes active in the routing table.

D. The port1 and port2 default routes are active in the routing table.

A. The two VLAN subinterfaces must have different VLAN IDs.

B. The two VLAN subinterfaces can have the same VLAN ID only if they have IP addresses in the same subnet.

C. The two VLAN subinterfaces can have the same VLAN ID only if they have IP addresses in different subnets.

D. The two VLAN subinterfaces can have the same VLAN ID only if they belong to different VDOMs.

A. For load balanced connections, the primary encapsulates TCP SYN packets before forwarding them to the secondary.

B. For non-load balanced connections, packets forwarded by the cluster to the server contain the virtual MAC address of port2 as source.

C. The cluster can load balance ICMP connections to the secondary.

D. The traffic sourced from the client and destined to the server is sent to FGT-1.

A. It failed the RPF check .

B. The next-hop IP address is unreachable.

C. It matched the default implicit firewall policy.

D. It matched an explicitly configured firewall policy with the action DENY.