FCNSP 무료 덤프문제 온라인 액세스

Which of the following items is NOT a packet characteristic matched by a firewall service object?

• A.ICMP type and code
• B.TCP/UDP source and destination ports
• C.IP protocol number
• D.TCP sequence number

Identify the statement which correctly describes the output of the following command:
diagnose ips anomaly list

• A.List the real-time counters for the configured DoS policy.
• B.Lists the configured DoS policy.
• C.Lists the errors captured when compiling the DoS policy.

Which of the following statements are correct about the HA diag command diagnose sys ha reset-uptime? (Select all that apply.)

• A.This command has no impact on the HA algorithm.
• B.This command resets the uptime variable used in the HA algorithm so it may cause a new master to become elected.
• C.The device this command is executed on is likely to switch from master to slave status if master override is enabled.
• D.The device this command is executed on is likely to switch from master to slave status if master override is disabled.

Which of the following must be configured on a FortiGate unit to redirect content requests to remote web cache servers?

• A.WCCP must be enabled on the interface facing the Web cache.
• B.WCCP must be enabled on all interfaces on the FortiGate unit through which HTTP traffic is passing.
• C.WCCP must be enabled as a global setting on the FortiGate unit.
• D.You must enabled explicit Web-proxy on the incoming interface.

What are the requirements for a cluster to maintain TCP connections after device or link failover? (Select all that apply.)

• A.Enable session pick-up.
• B.Only applies to UDP and ICMP connections.
• C.Connections must not be handled by a proxy.
• D.Only applies to connections handled by a proxy.