SAP Fortinet NSE 4 - FortiOS 7.2 - C-HRHFC-2311 FREE EXAM DUMPS QUESTIONS & ANSWERS
Refer to the exhibit to view the firewall policy
Why would the firewall policy not block a well-known virus, for
example eicar?
Why would the firewall policy not block a well-known virus, for
example eicar?
Correct Answer: D
Vote an answer
Refer to the exhibit to view the application control profile.
Based on the configuration, what will happen to Apple FaceTime?
Based on the configuration, what will happen to Apple FaceTime?
Correct Answer: D
Vote an answer
Refer to the exhibit, which contains a static route configuration.
An administrator created a static route for Amazon Web Services.
Which CLI command must the administrator use to view the route?
An administrator created a static route for Amazon Web Services.
Which CLI command must the administrator use to view the route?
Correct Answer: C
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
Refer to the exhibit.
A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up. but phase 2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, what configuration change will bring phase 2 up?
A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up. but phase 2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, what configuration change will bring phase 2 up?
Correct Answer: D
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
An organization requires remote users to send external application data running on their PCs and access FTP resources through an SSL/TLS connection.
Which FortiGate configuration can achieve this goal?
Which FortiGate configuration can achieve this goal?
Correct Answer: D
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
Refer to the exhibits.
The exhibits show the firewall policies and the objects used in the firewall policies.
The administrator is using the Policy Lookup feature and has entered the search criteria shown in the exhibit.
Which policy will be highlighted, based on the input criteria?
The exhibits show the firewall policies and the objects used in the firewall policies.
The administrator is using the Policy Lookup feature and has entered the search criteria shown in the exhibit.
Which policy will be highlighted, based on the input criteria?
Correct Answer: C
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
A network administrator has enabled SSL certificate inspection and antivirus on FortiGate. When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the file. When downloading the same file through HTTPS, FortiGate does not detect the virus and the file can be downloaded.
What is the reason for the failed virus detection by FortiGate?
What is the reason for the failed virus detection by FortiGate?
Correct Answer: C,D
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
Which two actions can you perform only from the root FortiGate in a Security Fabric? (Choose two.)
Correct Answer: B,D
Vote an answer
What is the effect of enabling auto-negotiate on the phase 2 configuration of an IPsec tunnel?
Correct Answer: D
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
An administrator must disable RPF check to investigate an issue.
Which method is best suited to disable RPF without affecting features like antivirus and intrusion prevention system?
Which method is best suited to disable RPF without affecting features like antivirus and intrusion prevention system?
Correct Answer: C
Vote an answer