クリック」
質問 1：
Which of the following statements are correct concerning IKE mode config? (Choose two)
A. It can dynamically assign IP addresses to IPsec VPN clients.
B. It uses the ESP protocol.
C. It can be enabled in the phase 2 configuration.
D. It can dynamically assign DNS settings to IPsec VPN clients.
正解：A,D
質問 2：
Which best describe the mechanism of a TCP SYN flood?
A. The attacker keeps open many connections with slow data transmission so that other clients cannot start new connections.
B. The attacker starts many connections, but never acknowledges to fully form them.
C. The attacker sends a packet designed to "sync" with the FortiGate.
D. The attacker sends a specially crafted malformed packet, intended to crash the target by exploiting its parser.
正解：B
質問 3：
You are the administrator in charge of a FortiGate acting as an IPsec VPN gateway using routebased mode. Users from either side must be able to initiate new sessions. There is only 1 subnet at either end and the FortiGate already has a default route.
Which two configuration steps are required to achieve these objectives? (Choose two.)
A. Add two IPsec phases 2.
B. Create one firewall policy.
C. Create two firewall policies.
D. Add a route to the remote subnet.
正解：C,D
質問 4：
How many packets are interchanged between both IPSec ends during the negotiation of a main-mode phase 1?
A. 5
B. 3
C. 6
D. 2
正解：C
質問 5：
What methods can be used to access the FortiGate CLI? (Choose two.)
A. A direct connection to the serial console port.
B. Using SNMP.
C. Using the CLI console widget in the GUI.
D. Using RCP.
正解：A,C
Which of the following statements are correct concerning IKE mode config? (Choose two)
A. It can dynamically assign IP addresses to IPsec VPN clients.
B. It uses the ESP protocol.
C. It can be enabled in the phase 2 configuration.
D. It can dynamically assign DNS settings to IPsec VPN clients.
正解：A,D
質問 2：
Which best describe the mechanism of a TCP SYN flood?
A. The attacker keeps open many connections with slow data transmission so that other clients cannot start new connections.
B. The attacker starts many connections, but never acknowledges to fully form them.
C. The attacker sends a packet designed to "sync" with the FortiGate.
D. The attacker sends a specially crafted malformed packet, intended to crash the target by exploiting its parser.
正解：B
質問 3：
You are the administrator in charge of a FortiGate acting as an IPsec VPN gateway using routebased mode. Users from either side must be able to initiate new sessions. There is only 1 subnet at either end and the FortiGate already has a default route.
Which two configuration steps are required to achieve these objectives? (Choose two.)
A. Add two IPsec phases 2.
B. Create one firewall policy.
C. Create two firewall policies.
D. Add a route to the remote subnet.
正解：C,D
質問 4：
How many packets are interchanged between both IPSec ends during the negotiation of a main-mode phase 1?
A. 5
B. 3
C. 6
D. 2
正解：C
質問 5：
What methods can be used to access the FortiGate CLI? (Choose two.)
A. A direct connection to the serial console port.
B. Using SNMP.
C. Using the CLI console widget in the GUI.
D. Using RCP.
正解：A,C
0 お客様のコメント