- All Exams Instant Download
Which of the following statements about central NAT are true? (Choose two.)
Which of the following statements about central NAT are true? (Choose two.)A . IP tool references must be removed from existing firewall policies before enabling central NAC . Central NAT can be enabled or disabled from the CLI only.D . Source NAT, using central NAT, requires at least one central...
What is the limitation of using a URL list and application control on the same firewall policy, in NCFW policy-based mode?
What is the limitation of using a URL list and application control on the same firewall policy, in NCFW policy-based mode?A . It limits the scope of application control to the browser-based technology category only.B . It limits the scope of application control to scan application traffic based on application...
Which is the correct description of a hash result as it relates to digital certificates?
Which is the correct description of a hash result as it relates to digital certificates?A . A unique value used to verify the input dataB . An output value that is used to identify the person or deuce that authored the input data.C . An obfuscation used to mask the...
Which security profile’s configuration does not change when you enable policy-based impaction?
NGFW mode allows policy-based configured for most impaction rules. Which security profile’s configuration does not change when you enable policy-based impaction?A . AntivirusB . Web proxyC . Web filteringD . Application controlView AnswerAnswer: D
Which one of the following routes is the best candidate route for FGT1 to route traffic from the Workstation to the Web server?
Examine the network diagram shown in the exhibit, then answer the following question: Which one of the following routes is the best candidate route for FGT1 to route traffic from the Workstation to the Web server? A) B) C) D) A . Option AB . Option BC . Option CD...
Which statement about the exhibit is true?
View the exhibit: Which statement about the exhibit is true? (Choose two.)A . Broadcast traffic received in port1-VLAN10 will not be forwarded to port2-VLAN10.B . port-VLAN1 is the native VLAN for the port1 physical interface.C . port1-VLAN10 and port2-VLAN10 can be assigned to different VDOMs.D . Traffic between port1-VLAN1 and...
A FortiGate is operating in NAT mode and configured with two virtual LAN (VLAN) sub interfaces added to the physical interface.
A FortiGate is operating in NAT mode and configured with two virtual LAN (VLAN) sub interfaces added to the physical interface. Which statements about the VLAN sub interfaces can have the same VLAND ID, only if they have IP addresses in different subnets.A . The two VLAN sub interfaces can...
Winch topology should be used to satisfy all of the requirements?
You mc tasked to design a new IPsec deployment with the following criteria: - There are two HQ sues that all satellite offices must connect to - The satellite offices do not need to communicate directly with other satellite offices - No dynamic routing will be used - The design...
Which of the following statements about NTLM authentication are correct? (Choose two.)
Which of the following statements about NTLM authentication are correct? (Choose two.)A . It is useful when users log in to DCs that are not monitored by a collector agent.B . It takes over as the primary authentication method when configured alongside FSSD . Multi-domain environments require DC agents on...
Which of the following will be highlighted based oil the input criteria?
View the following exhibit, which shows the firewall policies and the object uses in the firewall policies. The administrator is using the Policy Lookup feature and has entered the search create shown in the following exhibit. Which of the following will be highlighted based oil the input criteria?A . Policy...
