题目详情
当前位置:首页 > 职业培训考试
题目详情:
发布时间:2024-06-11 19:50:56

[多选题]
Which of the following are purposes of NAT traversal in IPsec? (Choose two.)
A. To detect intermediary NAT devices in the tunnel path.
B. To dynamically change phase 1 negotiation mode aggressive mode.
C. To encapsulation ESP packets in UDP packets using port 4500.
D. To force a new DH exchange with each phase 2 rekey.

更多"[多选题]Which of the following are pur"的相关试题:

[单选题]
Which CLI command allows administrators to troubleshoot Layer 2 issues such as an IP address conflict?
A. get system status
B. get system performance status
C. diagnose sys top
D. get system arp
[单选题]
Examine the following web filtering log.
Which statement about the log message is true?
A. The action for the category Games is set to block.
B. The usage quota for the IP address 10.0.1.10 has expired
C. The name of the applied web filter profile is default.
D. The web site miniclip.com matches a static URL filter whose action is set to Warning.
[单选题] Which of the following statements is correct according to this passage?
A. Mr. Barge is not fond of the music.
B. Mr. Barge likes music, but he doesn’t like the noise.
C. Mr. Barge often goes out in the evenings to give music lessons.
D. Mr. Barge expects a reply from Mrs. Huggett.
[单选题]
Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?
A. The public key of the web server certificate must be installed on the browser.
B. The web-server certificate must be installed on the browser.
C. The CA certificate that signed the web-server certificate must be installed on the browser.
D. The private key of the CA certificate that signed the browser certificate must be installed on the browser.
[多选题]
Which of the following statements about backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)
A. Log downloads from the GUI are limited to the current filter view
B. Log backups from the CLI cannot be restored to another FortiGate.
C. Log backups from the CLI can be configured to upload to FTP as a scheduled time
D. Log downloads from the GUI are stored as LZ4 compressed files.
[单选题]
Which of the following statements is true regarding SSL VPN settings for an SSL VPN portal?
A. By default FortiGate uses WINS servers to resolve names.
B. By default the SSL VPN portal requires the installation of a client's certificate.
C. By default split tunneling is enabled.
D. By default the admin GUI and SSL VPN portal use the same HTTPS port.
[多选题]
Which of the following statements correctly describes FortiGates route lookup behavior when searching for a suitable gateway? (Choose two)
A. Lookup is done on the first packet from the session originator
B. Lookup is done on the last packet sent from the responder
C. Lookup is done on every packet regardless of direction
D. Lookup is done on the trust reply packet from the responder
[多选题]
Which of the following statements about central NAT are true? (Choose two.)
A. IP tool references must be removed from existing firewall policies before enabling central NAT.
B. Central NAT can be enabled or disabled from the CLI only.
C. Source NAT using central NAT requires at least one central SNAT policy.
D. Destination NAT using central NAT requires a VIP object as the destination address in a firewall.
[多选题]
Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy-based inspection mode? (Choose two.)
A. Warning
B. Exempt
C. Allow
D. Learn
[多选题]
View the exhibit.
Which of the following statements are correct? (Choose two.)
A. This setup requires at least two firewall policies with the action set to IPsec.
B. Dead peer detection must be disabled to support this type of IPsec setup.
C. The TunnelB route is the primary route for reaching the remote site. The TunnelA route is used only if the TunnelB VPN is down.
D. This is a redundant IPsec setup.
[多选题]
Which of the following SD-WAN load -balancing method use interface weight value to distribute traffic? (Choose two.)
A. Source IP
B. Spillover
C. Volume
D. Session
[多选题]CSCF支持哪些鉴权方式? Which of the following authentication methods does the CSCF support?
A.AKA
B.DIGEST
C.EARLY-IMS
D.NBA
[单选题]下列说法错误的是: Which of the following statements is wrong? ( )
A.OOS红灯亮说明IPMC在上电过程中 If the OOS indicator is red, it indicates that the IPMC is being powered on.
B.OOS绿灯亮说明IPMC复位中 If the OOS indicator is green, it indicates that the IPMC is being reset.
C.H/S灯蓝色说明单板处于非工作状态,可热插拔 If the H/S indicator is blue, it indicates that the board is not operating, and is hot-pluggable.
D.H/S灯灭说明单板处于非工作状态,可热插拔 If the H/S indicator is off, it indicates that the board is not operating, and is hot-pluggable.
[多选题]以下描述正确的是( )。 Which of the following statements are correct: ( ).
A.plat_common_release_0xB4B9A.pkg是平台版本 plat_common_release_0xB4B9A.pkg is the platform version.
B.serv_0xB4B99.pkg 是业务版本 serv_0xB4B99.pkg is the service version.
C.sspi_common_release_0xB4B9B.pkg是接口机版本 sspi_common_release_0xB4B9B.pkg is the interface machine version.
D.sss_common_release_0xB4B99.pkg是通用版本 sss_common_release_0xB4B99.pkg is the general version.
[多选题]AGCF功能实体支持以下哪些功能? Which of the following function does AGCF support?
A.呼叫处理功能 Call Processing
B.注册功能 Registration Function
C.话务控制功能 Traffic Control
D.订阅功能 Subscription Function
[单选题]以下说法描述错误的是( )。 Which of the following statements is wrong? ( )
A.在系统升级后,执行完./run.sh后,我们一般用ps -ef |grep serv来检查网管进程和服务启动情况 After system upgrade, after we have run the “./run.sh” command, we usually run the “ps -ef |grep serv” command to check the OMM process and service startup.
B.cnvmverfile文件夹中在有老版本和新版本文件共存时,系统会自动选择新版本文件进行升级 If the old version files and the new version files coexist under the cnvmverfile folder, the system automatically selects the new version file to perform upgrade.
C.在网管升级过程中”选择网元类型”:需要检查网元类型设置是否正确。” FTP服务器类型”与升级前保持一致 During the OMM version upgrade process, we need to check whether the NE type is set correctly and check whether the FTP server type is consistent with that before upgrade.
D.服务器节点号在IMS系统网元中一般是使用10000+网元号 The server node ID is usually set to 10000+NE ID in the IMS system.
[单选题]下列哪个不是例行维护项目? ( ) Which of following is not routine maintenance item? ( )
A.日例行维护 Daily routine maintenance
B.周例行维护 Weekly routine maintenance
C.月例行维护 Monthly routine maintenance
D.季度例行维护 Quarterly routine maintenance
[多选题]SSS割接描述正确的是( )。 Which of the following statements are correct about cutover of the SSS system? ( )
A.SSS割接过程中需要时刻观察系统告警、以及性能统计任务和失败观察等。以及时发现割接过程中系统的异常 During cutover of the SSS system, we need to closely observe system alarms, performance statistics and failure observation records, so that we can immediately discover system abnormality during the cutover process.
B.目前SSS割接主要工作是SPN给SSS放号 During cutover of the SSS system, the main operation is to allocate numbers from the SPN to the SSS.
C.对于群用户的割接,需要先在SSS系统上由BOSS或手动增加群组配置才能进行割接 Before cutover of group users, either the BOSS system automatically or the engineers manually add the group configurations on the SSS system.
D.SSS割接完成后除了需要监控告警、性能统计、话务外还需要监控在线用户数指标 After cutover of the SSS system, we need to monitor alarms, performance statistics, traffic, and the number of online users.
[多选题]以下哪些网元间对接用diameter协议? Which of the following network elements use diameter protocol to do the interconnection?
A.P-CSCF和PCRF对接 P-CSCF and PCRF
B.I/S-CSCF和HSS对接 I/S-CSCF and HSS
C.S-CSCF和MGCF对接 S-CSCF and MGCF
D.S-CSCF和MRCF对接 S-CSCF and MRCF

我来回答:

购买搜题卡查看答案
[会员特权] 开通VIP, 查看 全部题目答案
[会员特权] 享免全部广告特权
推荐91天
¥36.8
¥80元
31天
¥20.8
¥40元
365天
¥88.8
¥188元
请选择支付方式
  • 微信支付
  • 支付宝支付
点击支付即表示同意并接受了《购买须知》
立即支付 系统将自动为您注册账号
请使用微信扫码支付

订单号:

请不要关闭本页面,支付完成后请点击【支付完成】按钮
恭喜您,购买搜题卡成功
重要提示:请拍照或截图保存账号密码!
我要搜题网官网:https://www.woyaosouti.com
我已记住账号密码