Fortinet Network Security Expert 4 Written (400) Set 3

1.

WAN optimization is configured in Active/Passive mode. When will the remote peer accept an attempt to initiate a tunnel?

The attempt will be accepted when the request comes from a known peer and there is a matching WAN optimization passive rule. The attempt will be accepted when there is a matching WAN optimization passive rule. The attempt will be accepted when the request comes from a known peer. The attempt will be accepted when a user on the remote peer accepts the connection request.

2.

SSL Proxy is used to decrypt the SSL-encrypted traffic. After decryption, where is the traffic buffered in preparation for content inspection?

The file is buffered by the application proxy. The file is buffered by the SSL proxy. In the upload direction, the file is buffered by the SSL proxy.In the download direction, the file is buffered by the application proxy. No file buffering is needed since a stream-based scanning approach is used for SSL content inspection.

3.

An administrator logs into a FortiGate unit using an account which has been assigned a super_admin profile. Which of the following operations can this administrator perform?

They can delete logged-in users who are also assigned the super_admin access profile. They can make changes to the super_admin profile. They can delete the admin account if the default admin user is not logged in. They can view all the system configuration settings but can not make changes. They can access configuration options for only the VDOMs to which they have been assigned.

4.

Which of the following statements is correct about how the FortiGate unit verifies username and password during user authentication?

If a remote server is included in a user group, it will be checked before local accounts. An administrator can define a local account for which the password must be verified by querying a remote server. If authentication fails with a local password, the FortiGate unit will query the authentication server if the local user is configured with both a local password andan authentication server. The FortiGate unit will only attempt to authenticate against Active Directory if Fortinet Server Authentication Extensions are installed and configured.

5.

In the Tunnel Mode widget of the web portal, the administrator has configured an IP Pool and enabled split tunneling. Which of the following statements is true about the IP address used by the SSL VPN client?

The IP pool specified in the SSL-VPN Tunnel Mode Widget Options will override the IP address range defined in the SSL-VPN Settings. Because split tunneling is enabled, no IP address needs to be assigned for the SSL VPN tunnel to be established. The IP address range specified in SSL-VPN Settings will override the IP address range in the SSL-VPN Tunnel Mode Widget Options.

Fortinet Network Security Expert 4 Written (400) Set 3

Congratulations

COMPANY

Products

OTHERS

Partner

Fortinet Network Security Expert 4 Written (400) Set 3

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner