Formulir tanpa judul

1. Review the IPsec phase 1 configuration in the exhibit; then answer the question below.

• The remote gateway address is 10.200.3.1
• The local IPsec interface address is 10.200.3.1
• The local gateway IP is the address assigned to port1
• The local gateway IP is 10.200.3.1

Which of the following items is NOT a packet characteristic matched by a firewall service object?

• ICMP type and code
• TCP/UDP source and destination ports
• IP protocol number
• TCP sequence number

Which web filtering inspection mode inspects DNS traffic?

• DNS-based.
• FQDN-based.
• Flow-based.
• URL-based.

You have created a new administrator account, and assign it the prof_admin profile. Which is false about that account's permissions?

• It cannot upgrade or downgrade firmware.
• t can create and assign administrator accounts to parts of its own VDOM.
• It can reset forgotten passwords for other administrator accounts such as "admin"
• It has a smaller permissions scope than accounts with the "super_admin" profile.

2. Which of the following statements is correct regarding FortiGate interfaces and spanning tree protocol? (Choose Two)

• Only FortiGate switch interfaces Participate in spanning tree.
• All FortiGate interfaces in transparent mode VDOMs participate in spanning tree.
• All FortiGate interfaces in NAT/route mode VDOMs Participate in spanning tree.
• All FortiGate interfaces in transparent mode VDOMs may block or forward BPDUs.

Which statements are correct properties of a partial mesh VPN deployment. (Choose two.)

• VPN tunnels interconnect between every single location.
• VPN tunnels are not configured between every single location.
• Some location may be reachable via a hub location.
• There are no hub locations in a partial mesh.

Which statement best describes what SSL.root is?

• The name of the virtual network adapter required in each user's PC for SSL VPN Tunnel mode.
• The name of a virtual interface in the root VDOM where all the SSL VPN user traffic comes from.
• A Firewall Address object that contains the IP addresses assigned to SSL VPN users.
• The virtual interface in the root VDOM that the remote SSL VPN tunnels connect to.

In a FSSO agentless polling mode solution, where must the collector agent be?

• In any Windows server
• In any of the AD domain controller
• In the master AD domain controller
• The FortiGate device polls the AD domain controllers

How many packets are interchanged between both IPSec ends during the negotiation of a main-mode phase 1?

• 5
• 3
• 2
• 6

You have configured the DHCP server on a FortiGate's port1 interface (or internal, depending on the model) to offer IPs in a range of 192.168.1.65-192.168.1.253. When the first host sends a DHCP request, what IP will the DHCP offer?

• 192.168.1.99
• 192.168.1.253
• 192.168.1.65
• 192.168.1.66