SAP C_HRHFC_2311 問題集

質問 1：
Which three options are the remote log storage options you can configure on FortiGate? (Choose three.)
A. FortiCache
B. FortiSandbox
C. FortiCloud
D. FortiSIEM
E. FortiAnalyzer
正解：C,D,E
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Which statement describes a characteristic of automation stitches?
A. They can have one or more triggers.
B. They can be created on any device in the fabric.
C. They can run multiple actions simultaneously.
D. They can be run only on devices in the Security Fabric.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
When a firewall policy is created, which attribute is added to the policy to support recording logs to a FortiAnalyzer or a FortiManager and improves functionality when a FortiGate is integrated with these devices?
A. Sequence ID
B. Log ID
C. Universally Unique Identifier
D. Policy ID
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
An administrator is configuring an IPsec VPN between site A and site B. The Remote Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192. 168. 1.0/24 and the remote quick mode selector is 192. 168.2.0/24.
Which subnet must the administrator configure for the local quick mode selector for site B?
A. 192. 168. 1.0/24
B. 192. 168.0.0/24
C. 192. 168.3.0/24
D. 192. 168.2.0/24
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 5：
What are two scanning techniques supported by FortiGate? (Choose two.)
A. Antivirus scan
B. Trojan scan
C. Machine learning scan
D. Ransomware scan
正解：A,C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Refer to the exhibit.

Which contains a session diagnostic output. Which statement is true about the session diagnostic output?
A. The session is in FIN_ACK state.
B. The session is in ESTABLISHED state.
C. The session is in FTN_WAIT state.
D. The session is in SYN_SENT state.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Refer to the exhibit.

The Root and To_Internet VDOMs are configured in NAT mode. The DMZ and Local VDOMs are configured in transparent mode.
The Root VDOM is the management VDOM. The To_Internet VDOM allows LAN users to access the internet. The To_Internet VDOM is the only VDOM with internet access and is directly connected to ISP modem .
With this configuration, which statement is true?
A. Inter-VDOM links are required to allow traffic between the Local and DMZ VDOMs.
B. Inter-VDOM links are required to allow traffic between the Local and Root VDOMs.
C. A static route is required on the To_Internet VDOM to allow LAN users to access the internet.
D. Inter-VDOM links are not required between the Root and To_Internet VDOMs because the Root VDOM is used only as a management VDOM.
正解：B

質問 8：
Refer to the exhibit.

Based on the raw log, which two statements are correct? (Choose two.)
A. Traffic is blocked because Action is set to DENY in the firewall policy.
B. Traffic belongs to the root VDOM.
C. Log severity is set to error on FortiGate.
D. This is a security log.
正解：B,D