更多"[单选题]NGFW mode allows policy-based "的相关试题:
[单选题]
Examine this FortiGate configuration:
Examine the output of the following debug command:
Based on the diagnostic outputs above how is the FortiGate handling the traffic for new sessions that require inspection?
A. It is allowed but with no inspection
B. It is allowed and inspected as long as the inspection is flow based
C. It is dropped.
D. It is allowed and inspected as long as the only inspection required is antivirus.
[单选题]
Examine the IPS sensor configuration shown in the exhibit and then Answer the question
Below.An administrator has configured the WINDOWS_SERVERS IPS sensor in an attempt to determine
Whether the influx of HTTPS traffic is an attack attempt or not. After applying the IPS sensor FortiGate is still not generating any IPS logs for the HTTPS traffic.
What is a possible reason for this?
A. The IPS filter is missing the Protocol: HTTPS option.
B. The HTTPS signatures have not been added to the sensor.
C. A DoS policy should be used instead of an IPS sensor.
D. A DoS policy should be used instead of an IPS sensor.
E. The firewall policy is not using a full SSL inspection profile.
[单选题]
Examine this FortiGate configuration:How does the FortiGate handle web proxy traffic coming from the IP address 10.2.1.200 that requires
Authorization?
A. It always authorizes the traffic without requiring authentication.
B. It drops the traffic.
C. It authenticates the traffic using the authentication scheme SCHEME2.
D. It authenticates the traffic using the authentication scheme SCHEME1.
[多选题]
Which two configuration settings are synchronized when FortiGate devices are in an active- active HA cluster? (Choose two.)
A. FortiGuard web filter cache
B. FortiGate hostname
C. NTP
D. DNS
[多选题]
Examine this PAC file configuration.
Which of the following statements are true? (Choose two.)
A. Browsers can be configured to retrieve this PAC file from the FortiGate.
B. Any web request to the 172.25.120.0/24 subnet is allowed to bypass the proxy.
C. All requests not made to Fortinet.com or the 172.25.120.0/24 subnet have to go through altproxy.corp.com: 8060.
D. Any web request fortinet.com is allowed to bypass the proxy.
[判断题]PRACH Configuration Index参数指示了每一种Preamble Format对应的PRACH允许发送的无线帧号和子帧号配置，可发送的无线帧号和子帧号越多,则可接入的负荷越高
A.正确
B.错误
[单选题]
Which CLI command allows administrators to troubleshoot Layer 2 issues such as an IP address conflict?
A. get system status
B. get system performance status
C. diagnose sys top
D. get system arp
[单选题]display 命令可显示路由器current-configuration文件的组织结构，配置文件中（）主要设定互联、业务、虚拟端口的IP地址和子网掩码，封装何种协议，COST值等配置。
A.管理部分
B.端口部分
C.路由协议部分
D.策略部分
[单选题]display命令可显示路由器current-configuration文件的组织结构,配置文件中()主要设定路由器名称、登录口令密码、TELNET用户数量、启用服务类型、日志等配置。
A. 管理部分
B. 端口部分
C. 路由协议部分
D. 策略部分
[单选题]已知A320在某机场着陆，CONFIGURATION FULL，重心正常，干跑道，着陆重量58吨，机场压力高度8000FT，ISA温度，顺风5KT，跑道无坡度，根据图4-85确定A320在该机场的所需着陆距离为
A.1776m
B.1345m
C.1475m
D.1900m
[判断题]机场助航灯光是机场助航设施之一，它要满足构形(configuration)、颜色(color)、坎德拉(condelas)、有效范围(coverage)等某个方面的要求。( )
A.正确
B.错误
[单选题]
What inspection mode does FortiGate use if it is configured as a policy-based next-generation firewall (NGFW)?
A. Full Content inspection
B. Proxy-based inspection
C. Certificate inspection
D. Flow-based inspection
[单选题]SETOFFSIDERNG/MODE'在情况下,出现
A.ND1或ND2故障
B.FD故障
C.其中一部FMGC故障
D.IR故障
[单选题]
A FortiGate is operating in NAT mode and configured with two virtual LAN (VLAN) sub interfaces added to the physical interface.
Which statements about the VLAN sub interfaces can have the same VLAN ID only if they have IP addresses in different subnets.
A. The two VLAN sub interfaces can have the same VLAN ID only if they have IP addresses in different subnets.
B. The two VLAN sub interfaces must have different VLAN IDs.
C. The two VLAN sub interfaces can have the same VLAN ID only if they belong to different VDOMs.
D. The two VLAN sub interfaces can have the same VLAN ID only if they have IP addresses in the same subnet.
