SAP C_HRHFC_2311 問題集

質問 1：
Which statement is correct regarding the use of application control for inspecting web applications?
A. Application control can identity child and parent applications, and perform different actions on them.
B. Application control does not require SSL inspection to identity web applications.
C. Application control signatures are organized in a nonhierarchical structure.
D. Application control does not display a replacement message for a blocked web application.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
FortiGate is configured as a policy-based next-generation firewall (NGFW) and is applying web filtering and application control directly on the security policy. Which two other security profiles can you apply to the security policy? (Choose two.)
A. Antivirus scanning
B. Intrusion prevention
C. DNS filter
D. File filter
正解：A,B

質問 3：
Which of the following statements is true regarding SSL VPN settings for an SSL VPN portal?
A. By default, the SSL VPN portal requires the installation of a client's certificate.
B. By default, the admin GUI and SSL VPN portal use the same HTTPS port.
C. By default, FortiGate uses WINS servers to resolve names.
D. By default, split tunneling is enabled.
正解：B

質問 4：
Refer to the exhibit.
A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.

Based on the phase 2 configuration shown in the exhibit, which configuration change will bring phase 2 up?
A. On HQ-FortiGate, enable Auto-negotiate.
B. On Remote-FortiGate, set Seconds to 43200.
C. On HQ-FortiGate, enable Diffie-Hellman Group 2.
D. On HQ-FortiGate, set Encryption to AES256.
正解：D

質問 5：
When a firewall policy is created, which attribute is added to the policy to support recording logs to a FortiAnalyzer or a FortiManager and improves functionality when a FortiGate is integrated with these devices?
A. Sequence ID
B. Log ID
C. Universally Unique Identifier
D. Policy ID
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Refer to the exhibit.

Which contains a session list output. Based on the information shown in the exhibit, which statement is true?
A. Destination NAT is disabled in the firewall policy.
B. One-to-one NAT IP pool is used in the firewall policy.
C. Overload NAT IP pool is used in the firewall policy.
D. Port block allocation IP pool is used in the firewall policy.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 7：
A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 fails to come up. The administrator has also re-entered the pre-shared key on both FortiGate devices to make sure they match.

Based on the phase 1 configuration and the diagram shown in the exhibit, which two configuration changes will bring phase 1 up? (Choose two.)
A. On HQ-FortiGate, disable Diffie-Helman group 2.
B. On both FortiGate devices, set Dead Peer Detection to On Demand.
C. On HQ-FortiGate, set IKE mode to Main (ID protection).
D. On Remote-FortiGate, set port2 as Interface.
正解：C,D
解説: (Topexam メンバーにのみ表示されます)

質問 8：
An administrator configures outgoing interface any in a firewall policy.
What is the result of the policy list view?
A. By Sequence view is disabled.
B. Policy lookup is disabled.
C. Search option is disabled.
D. Interface Pair view is disabled.
正解：D
解説: (Topexam メンバーにのみ表示されます)