Fortinet Network Security Expert - FortiOS 5.4 Set 5

1.

An administrator wishes to generate a report showing Top Traffic by service type, but wants to exclude SMTP traffic from the report. Which of the following statements best describes how to do this?

In the Service field of the Data Filter, type 25/smtp and select the NOT checkbox. Add the following entry to the Generic Field section of the Data Filter: service=!smtp. When editing the chart, uncheck mlog to indicate that Mail Filtering data is being excluded when generating the chart. When editing the chart, enter dns in the Exclude Service field.

2.

An organization wishes to protect its SIP Server from call flooding attacks. Which of the following configuration changes can be performed on the FortiGate unit to fulfill this requirement?

Apply an application control list which contains a rule for SIP and has the Limit INVITE Request option configured. Enable Traffic Shaping for the appropriate SIP firewall policy. Reduce the session time-to-live value for the SIP protocol by running the configure system session-ttl CLI command. Run the set udp-idle-timer CLI command and set a lower time value.

3.

In a High Availability configuration operating in Active-Active mode, which of the following correctly describes the path taken by a load-balanced HTTP session?

Request: Internal Host -> Master FG -> Slave FG -> Internet -> Web Server

Request: Internal Host -> Master FG -> Slave FG -> Master FG -> Internet -> Web Server

Request: Internal Host -> Slave FG -> Internet -> Web Server

Request: Internal Host -> Slave FG -> Master FG -> Internet -> Web Server

4.

The following diagnostic output is displayed in the CLI: Based on this output, which of the following statements is correct?

Firewall policy 9 has endpoint compliance enabled but not firewall authentication. The client check that is part of an SSL VPN connection attempt failed. This user has been associated with a guest profile as evidenced by the group id of 0. An auth-keepalive value has been enabled.

5.

Which of the following statements is correct about configuring web filtering overrides?

The Override option for FortiGuard Web Filtering is available for any user group type. Admin overrides require an administrator to manually allow pending override requests which are listed in the Override Monitor. The Override Scopes of User and User Group are only for use when Firewall Policy Authentication is also being used. Using Web Filtering Overrides requires the use of Firewall Policy Authentication.

6.

The transfer of encrypted files or the use of encrypted protocols between users and servers on the internet can frustrate the efforts of administrators attempting to monitor traffic passing through the FortiGate unit and ensuring user compliance to corporate rules. Which of the following items will allow the administrator to control the transfer of encrypted data through the FortiGate unit? (Select all that apply.)

Encrypted protocols can be scanned through the use of the SSL proxy. DLP rules can be used to block the transmission of encrypted files. Firewall authentication can be enabled in the firewall policy, preventing the use of encrypted communications channels. Application control can be used to monitor the use of encrypted protocols; alerts can be sent to the administrator through email when the use of encryptedprotocols is attempted.

7.

The following ban list entry is displayed through the CLI. Based on this command output, which of the following statements is correct?

The administrator has specified the Attack and Victim Address method for the quarantine. This diagnostic entry results from the administrator running the diag ips log test command. This command has no effect on traffic. A DLP rule has been matched. An attack has been repeated more than once during the holddown period; the expiry time has been reset to indefinite.

8.

What protocol cannot be used with the active authentication type?

Local RADIUS LDAP RSSO

9.

Which statement best describes the objective of the SYN proxy feature available in SP processors?

Accelerate the TCP 3-way handshake Collect statistics regarding traffic sessions Analyze the SYN packet to decide if the new session can be offloaded to the SP processor Protect against SYN flood attacks.

10.

An Internet browser is using the WPAD DNS method to discover the PAC file's URL. The DNS server replies to the browser's request with the IP address 10.100.1.10. Which URL will the browser use to download the PAC file?

http://10.100.1.10/proxy.pac https://10.100.1.10/ http://10.100.1.10/wpad.dat https://10.100.1.10/proxy.pac

Fortinet Network Security Expert - FortiOS 5.4 Set 5

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Fortinet Network Security Expert - FortiOS 5.4 Set 5

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner