C-HRHFC-2311 무료 덤프문제 온라인 액세스

If the Services field is configured in a Virtual IP (VIP), which statement is true when central NAT is used?

• A.The Services field prevents multiple sources of traffic from using multiple services to connect to a single computer.
• B.The Services field prevents SNAT and DNAT from being combined in the same policy.
• C.The Services field is used when you need to bundle several VIPs into VIP groups.
• D.The Services field removes the requirement to create multiple VIPs for different services.

Which of the following are purposes of NAT traversal in IPsec? (Choose two.)

• A.To force a new DH exchange with each phase 2 rekey.
• B.To dynamically change phase 1 negotiation mode aggressive mode.
• C.To encapsulation ESP packets in UDP packets using port 4500.
• D.To detect intermediary NAT devices in the tunnel path.

An administrator does not want to report the logon events of service accounts to FortiGate. What setting on the collector agent is required to achieve this?

• A.Add user accounts to the Ignore User List.
• B.Add user accounts to Active Directory (AD).
• C.Add the support of NTLM authentication.
• D.Add user accounts to the FortiGate group fitter.

Which statement about the policy ID number of a firewall policy is true?

• A.It defines the order in which rules are processed.
• B.It is required to modify a firewall policy using the CLI.
• C.It changes when firewall policies are reordered.
• D.It represents the number of objects used in the firewall policy.

An administrator wants to simplify remote access without asking users to provide user credentials.
Which access control method provides this solution?

• A.SSL VPN
• B.ZTNA IP/MAC filtering mode
• C.ZTNA access proxy
• D.L2TP