Fortinet Network Security Expert - FortiOS 5.4 Set 5

1.

An administrator wishes to generate a report showing Top Traffic by service type, but wants to exclude SMTP traffic from the report. Which of the following statements best describes how to do this?

In the Service field of the Data Filter, type 25/smtp and select the NOT checkbox. Add the following entry to the Generic Field section of the Data Filter: service=!smtp. When editing the chart, uncheck mlog to indicate that Mail Filtering data is being excluded when generating the chart. When editing the chart, enter dns in the Exclude Service field.

2.

An organization wishes to protect its SIP Server from call flooding attacks. Which of the following configuration changes can be performed on the FortiGate unit to fulfill this requirement?

Apply an application control list which contains a rule for SIP and has the Limit INVITE Request option configured. Enable Traffic Shaping for the appropriate SIP firewall policy. Reduce the session time-to-live value for the SIP protocol by running the configure system session-ttl CLI command. Run the set udp-idle-timer CLI command and set a lower time value.

3.

In a High Availability configuration operating in Active-Active mode, which of the following correctly describes the path taken by a load-balanced HTTP session?

Request: Internal Host -> Master FG -> Slave FG -> Internet -> Web Server

Request: Internal Host -> Master FG -> Slave FG -> Master FG -> Internet -> Web Server

Request: Internal Host -> Slave FG -> Internet -> Web Server

Request: Internal Host -> Slave FG -> Master FG -> Internet -> Web Server

4.

The following diagnostic output is displayed in the CLI: Based on this output, which of the following statements is correct?

Firewall policy 9 has endpoint compliance enabled but not firewall authentication. The client check that is part of an SSL VPN connection attempt failed. This user has been associated with a guest profile as evidenced by the group id of 0. An auth-keepalive value has been enabled.

5.

Which of the following statements is correct about configuring web filtering overrides?

The Override option for FortiGuard Web Filtering is available for any user group type. Admin overrides require an administrator to manually allow pending override requests which are listed in the Override Monitor. The Override Scopes of User and User Group are only for use when Firewall Policy Authentication is also being used. Using Web Filtering Overrides requires the use of Firewall Policy Authentication.

Fortinet Network Security Expert - FortiOS 5.4 Set 5

Congratulations

COMPANY

Products

OTHERS

Partner

Fortinet Network Security Expert - FortiOS 5.4 Set 5

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner