Grátis: What must you configure to enable proxy-based TCP session failover? A. You must configure ha-configuration-sync under configure system ha. B. You d... – Questões Respondidas

Português

Outros

What must you configure to enable proxy-based TCP session failover?
A. You must configure ha-configuration-sync under configure system ha.
B. You do not need to configure anything because all TCP sessions are automatically failed over.
C. You must configure session-pickup-enable under configure system ha.
D. You must configure session-pickup-connectionless enable under configure system ha.

há 5 meses

há 5 meses

FCP_FGT_AD-7 6 FCP - FortiGate 7 6 Administrator Dumps

FCP_FGT_AD-7 6 FCP - FortiGate 7 6 Administrator Dumps

Respostas

Ed

há 5 meses

Parece que sua pergunta está relacionada a configurações de alta disponibilidade (HA) em um sistema de rede, especificamente sobre failover de sessões TCP baseadas em proxy. Vamos analisar as alternativas: A. Você deve configurar ha-configuration-sync sob configure system ha. - Esta configuração é mais sobre sincronização de configuração entre dispositivos HA, não especificamente sobre failover de sessões TCP. B. Você não precisa configurar nada porque todas as sessões TCP são automaticamente transferidas. - Isso não é verdade, pois geralmente é necessário configurar algo para garantir o failover adequado. C. Você deve configurar session-pickup-enable sob configure system ha. - Esta opção é relevante, pois a configuração de "session-pickup" é necessária para permitir que as sessões TCP sejam transferidas entre os dispositivos em um ambiente HA. D. Você deve configurar session-pickup-connectionless enable sob configure system ha. - Esta configuração é para sessões sem conexão, que não se aplica ao failover de sessões TCP. A alternativa correta, que se refere à configuração necessária para habilitar o failover de sessões TCP baseadas em proxy, é: C. Você deve configurar session-pickup-enable sob configure system ha.

Essa resposta te ajudou?

0

0

left-side-bubbles-background

right-side-bubbles-background

Crie sua conta grátis para liberar essa resposta. 🤩

Já tem uma conta?

Ao continuar, você aceita os Termos de Uso e Política de Privacidade

Ainda com dúvidas?

Envie uma pergunta e tenha sua dúvida de estudo respondida!

Essa pergunta também está no material:

FCP_FGT_AD-7 6 FCP - FortiGate 7 6 Administrator Dumps

FCP_FGT_AD-7 6 FCP - FortiGate 7 6 Administrator Dumps

Mais perguntas desse material

Refer to the exhibit. Which route will be selected when trying to reach 10.20.30.254?
A. 10.20.30.0/24 [10/0] via 172.20.167.254, port3, [1/0]
B. 10.30.20.0/24 [10/0] via 172.20.121.2, port1, [1/0]
C. 10.20.30.0/26 [10/0] via 172.20.168.254, port2, [1/0]
D. 0.0.0.0/0 [10/0] via 172.20.121.2, port1, [1/0]

An administrator needs to inspect all web traffic (including Internet web traffic) coming from users connecting to the SSL-VPN. How can this be achieved?
A. Assigning public IP addresses to SSL-VPN users
B. Configuring web bookmarks
C. Disabling split tunneling
D. Using web-only mode

What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?
A. It limits the scanning of application traffic to the browser-based technology category only.
B. It limits the scanning of application traffic to the DNS protocol only.
C. It limits the scanning of application traffic to use parent signatures only.
D. It limits the scanning of application traffic to the application category only.

FortiGate is operating in NAT mode and is configured with two virtual LAN (VLAN) subinterfaces added to the same physical interface. In this scenario, what are two requirements for the VLAN ID? (Choose two.)
A. The two VLAN subinterfaces can have the same VLAN ID, only if they have IP addresses in the same subnet.
B. The two VLAN subinterfaces can have the same VLAN ID, only if they belong to different VDOMs.
C. The two VLAN subinterfaces must have different VLAN IDs.
D. The two VLAN subinterfaces can have the same VLAN ID, only if they have IP addresses in different subnets.

An administrator has configured a strict RPF check on FortiGate. How does strict RPF check work?
A. Strict RPF allows packets back to sources with all active routes.
B. Strict RPF checks the best route back to the source using the incoming interface.
C. Strict RPF checks only for the existence of at least one active route back to the source using the incoming interface.
D. Strict RPF check is run on the first sent and reply packet of any new session.

The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) for Facebook. Users are given access to the Facebook web application. They can play video content hosted on Facebook, but they are unable to leave reactions on videos or other types of posts. Which part of the policy configuration must you change to resolve the issue?
A. Force access to Facebook using the HTTP service.
B. Make the SSL inspection a deep content inspection.
C. Add Facebook in the URL category in the security policy.
D. Get the additional application signatures required to add to the security policy.