FCNSP 무료 덤프문제 온라인 액세스

Which of the following statements are correct regarding the configuration of a FortiGate unit as an SSL VPN gateway? (Select all that apply.)

• A.The portal settings specify whether the connection will operate in web-only or tunnel mode.
• B.The specific routes needed to access internal resources through an SSL VPN connection in tunnel mode from the client computer are defined in the routing widget associated with the SSL VPN portal.
• C.Tunnel mode can only be used if the SSL VPN user groups have at least one Host Check option enabled.
• D.In order to apply a portal to a user, that user must belong to an SSL VPN user group.

What advantages are there in using a fully Meshed IPSec VPN configuration instead of a hub and spoke set of IPSec tunnels?

• A.Full mesh topology is the most fault-tolerant configuration.
• B.Using a full mesh topology simplifies configuration.
• C.Using a full mesh topology provides stronger encryption.
• D.Using a hub and spoke topology is required to achieve full redundancy.

A DLP rule with an action of Exempt has been matched against traffic passing through the FortiGate unit. Which of the following statements is correct regarding how this transaction will be handled by the FortiGate unit?

• A.Any other matched DLP rules will be ignored with the exception of Archiving.
• B.The client IP address will be added to a white list.
• C.The traffic matching the DLP rule will bypass antivirus scanning.
• D.Future files whose characteristics match this file will bypass DLP scanning.

Which part of an email message exchange is NOT inspected by the POP3 and IMAP proxies?

• A.File attachments
• B.Message headers
• C.Message body
• D.TCP connection

An administrator is examining the attack logs and notices the following entry:
type=ips subtype=signature pri=alert vd=root serial=1995 attack_id=103022611 src=69.45.64.22 dst=192.168.1.100 src_port=80 dst_port=4887 src_int=wlan dst_int=internal status=detected proto=6 service=4887/tcp user=N/A group=N/A msg=web_client: IE.IFRAME.BufferOverflow.B
Based on the information displayed in this entry, which of the following statements are correct? (Select all that apply.)

• A.The attack was against a FortiGate unit at the 192.168.1.100 IP address.
• B.The attack was detected and blocked by the FortiGate unit.
• C.The attack was detected and passed by the FortiGate unit.
• D.This is an HTTP server attack.