最新なSAP C_HRHFC_2311問題集（184題）、真実試験の問題を全部にカバー！

質問 1：
Refer to the exhibit showing a debug flow output.

What two conclusions can you make from the debug flow output? (Choose two.)
A. The default route is required to receive a reply.
B. A firewall policy allowed the connection.
C. Anew traffic session was created.
D. The debug flow is for ICMP traffic.
正解：C,D
解説: (Pass4Test メンバーにのみ表示されます)

質問 2：
On FortiGate, which type of logs record information about traffic directly to and from the FortiGate management IP addresses?
A. Security logs
B. System event logs
C. Local traffic logs
D. Forward traffic logs
正解：C
解説: (Pass4Test メンバーにのみ表示されます)

質問 3：
Which CLI command will display sessions both from client to the proxy and from the proxy to the servers?
A. diagnose wad session list | grep "hook=pre"&"hook=out"
B. diagnose wad session list
C. diagnose wad session list | grep hook-pre&&hook-out
D. diagnose wad session list | grep hook=pre&&hook=out
正解：B

質問 4：
An administrator is configuring an Ipsec between site A and siteB. The Remotes Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192. 16. 1.0/24 and the remote quick mode selector is 192. 16.2.0/24. How must the administrator configure the local quick mode selector for site B?
A. 192. 168.0.0/8
B. 192. 168.3.0/24
C. 192. 168.2.0/24
D. 192. 168. 1.0/24
正解：C

質問 5：
Refer to the exhibit.

The exhibit displays the output of the CLI command: diagnose sys ha dump-by vcluster.
Which two statements are true? (Choose two.)
A. FortiGate SN FGVM010000064692 is the primary because of higher HA uptime.
B. FortiGate SN FGVM010000064692 has the higher HA priority.
C. FortiGate devices are not in sync because one device is down.
D. FortiGate SN FGVM010000065036 HA uptime has been reset.
正解：B,D
解説: (Pass4Test メンバーにのみ表示されます)

質問 6：
Which statement about the deployment of the Security Fabric in a multi-VDOM environment is true?
A. Downstream devices can connect to the upstream device from any of their VDOMs.
B. Each VDOM in the environment can be part of a different Security Fabric.
C. Security rating reports can be run individually for each configured VDOM.
D. VDOMs without ports with connected devices are not displayed in the topology.
正解：D
解説: (Pass4Test メンバーにのみ表示されます)

質問 7：
Refer to the exhibit.

Which contains a session list output. Based on the information shown in the exhibit, which statement is true?
A. Destination NAT is disabled in the firewall policy.
B. One-to-one NAT IP pool is used in the firewall policy.
C. Port block allocation IP pool is used in the firewall policy.
D. Overload NAT IP pool is used in the firewall policy.
正解：B
解説: (Pass4Test メンバーにのみ表示されます)