更多"[单选题]Which of statement is true abo"的相关试题:
[单选题]
How does FortiGate act when using SSL VPN in web mode?
A. FortiGate acts as an FDS server.
B. FortiGate acts as an HTTP reverse proxy.
C. FortiGate acts as DNS server.
D. FortiGate acts as router.
[单选题]
Refer to the exhibits.
The SSL VPN connection fails when a user attempts to connect to it. What should the user do to
Successfully connect to SSL VPN?
A. Change the SSL VPN port on the client.
B. Change the Server IP address.
C. Change the idle-timeout.
D. Change the SSL VPN portal to the tunnel.
[单选题]
Which statement about the IP authentication header (AH) used by IPsec is true?
A. AH does not provide any data integrity or encryption.
B. AH does not support perfect forward secrecy.
C. AH provides data integrity bur no encryption.
D. AH provides strong data integrity but weak encryption.
[单选题]
Which statement about the policy ID number of a firewall policy is true?
A. It is required to modify a firewall policy using the CLI.
B. It represents the number of objects used in the firewall policy.
C. It changes when firewall policies are reordered.
D. It defines the order in which rules are processed.
[单选题]
Which statement regarding the firewall policy authentication timeout is true?
A. It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source IP.
B. It is a hard timeout. The FortiGate removes the temporary policy for a user's source IP address after this timer has expired.
C. It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source MAC.
D. It is a hard timeout. The FortiGate removes the temporary policy for a user's source MAC address after this timer has expired.
[单选题]
Which statement correctly describes NetAPI polling mode for the FSSO collector agent?
A. The collector agent uses a Windows API to query DCs for user logins.
B. NetAPI polling can increase bandwidth usage in large networks.
C. The collector agent must search security event logs.
D. The NetSessionEnum function is user] to track user logouts.
[多选题]以下描述正确的是（ ）。
Which of the following statements are correct: ( ).
A.plat_common_release_0xB4B9A.pkg是平台版本
plat_common_release_0xB4B9A.pkg is the platform version.
B.serv_0xB4B99.pkg 是业务版本
serv_0xB4B99.pkg is the service version.
C.sspi_common_release_0xB4B9B.pkg是接口机版本
sspi_common_release_0xB4B9B.pkg is the interface machine version.
D.sss_common_release_0xB4B99.pkg是通用版本
sss_common_release_0xB4B99.pkg is the general version.
[多选题]
Which two statements are true about collector agent standard access mode? (Choose two.)
A. Standard mode uses Windows convention-NetBios: Domain\Username.
B. Standard mode security profiles apply to organizational units (OU).
C. Standard mode security profiles apply to user groups.
D. Standard access mode supports nested groups.
[多选题]
Which two statements are true about the FGCP protocol? (Choose two.)
A. Not used when FortiGate is in Transparent mode
B. Elects the primary FortiGate device
C. Runs only over the heartbeat links
D. Is used to discover FortiGate devices in different HA groups
[多选题]
Which two statements ate true about the Security Fabric rating? (Choose two.)
A. It provides executive summaries of the four largest areas of security focus.
B. Many of the security issues can be fixed immediately by click ng Apply where available.
C. The Security Fabric rating must be run on the root FortiGate device in the Security Fabric.
D. The Security Fabric rating is a free service that comes bundled with alt FortiGate devices.
[多选题]
Which two statements are true about the RPF check? (Choose two.)
A. The RPF check is run on the first sent packet of any new session.
B. The RPF check is run on the first reply packet of any new session.
C. The RPF check is run on the first sent and reply packet of any new session.
D. RPF is a mechanism that protects FortiGate and your network from IP spoofing attacks.
[单选题]如果希望在EC2上使用不同的SSL设置具有多个虚拟主机的web服务器，你需要:
A.Use an S3 bucket with server side encryption
B.Upload your SSL server certification to Amazon identity
and Access
Management
C.Create one Amazon Elastic Load Balancer with SSL termination
D.Run your SQL EC2 instance in VPC
[单选题]网内用户按提供附加的专用编号计划（VPN短号）、基于VPN短号的网内呼叫以及VPN资费等功能和服务，这属于（）业务。
A.亲情号码
B.移动虚拟专用网业务
C.分区分时
D.私密热信
[判断题]在MPLS L3VPN中，VPN用户的IP地址不能相同，否则会产生路由冲突。
A.正确
B.错误
[单选题]一家公司正在使用托管 VPN 连接来连接其本地数据中心。他们想监
控 vpn 何时出现故障。他们如何实施监控？
A.使用 TunnelState
CloudWatch 指标
B.使用自定义
CloudWatch 指标
C.使用 Lambda 函数消费
VPN 日志
D.创建和部署一个外部服务来
ping VPN 端点
[单选题]在MPLSL3VPN中，PE设备上的路由表可分为公网路由表和私网（VPN）路由表
A.对
B.错
