FORTINET Principles of Network Security and FortiGate Configurations Set 3

generate variable-sized output for fixed input ✘ generate fixed-sized output variable input ✘ generate fixed-sized output for fixed input ✘ generate variable-sized output for variable input ✔

only be used with OSPF ✘ can be used with RIP v1 ✘ can be used with RIP v2 ✘ can be used with RIP v3 ✔

des & md5 ✘ 3des & md5 ✘ aes & md5 ✘ aes & sha1 ✔

forwards DNS queries from a pc to the DNS servers defined in the pcs tcp/ip settings ✘ become the DNS server , pc send DNS query to the Fortigate unit ✘ pass its DNS setting to the PC in the local network ✘ forward DNS query to DNS servers and returns the answer to the pc that made the request ✔

1 ✘

set the vip to static nat ✘ set the vip external port to 80 ✘ set the external ip to 10.1.1.1 ✘ add a firewall policy from external to internal , set the destination to the name of the vip ✔ vpn ✔

you can not change the name of address or address group ✘ the same address range can not be assigned to another address name ✘ if a address group I used in a firewall policy , it can be deleted only if it is removed from the policy ✘ if a address is assigned in a address group , it can not be deleted until it is removed from that addressgroup ✔

aggressive mode ✘ main mode ✘ short keep alive ✘ key life based on bytes rather than seconds ✔ PFS ✔

source address group ✘ (b) custom service ✘ (c) predefined service ✘ (d) URLS ✔ (e) one-time schedule ✔

drop the packet that trigger the signature ✘ drop the packet that trigger the signature , remove the session from session table without sending reset ✘ drop the packet that trigger the signature , drop any other packets in the same session ✘ drop the packet that trigger the signature , reset both client and server , remove the session fromsession table ✔