Logo Passei Direto
Buscar

Português

Outros
What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?
A. It limits the scanning of application traffic to the browser-based technology category only.
B. It limits the scanning of application traffic to the DNS protocol only.
C. It limits the scanning of application traffic to use parent signatures only.
D. It limits the scanning of application traffic to the application category only.
User badge image
Portuguesando

há 5 meses

User badge image
Portuguesando

há 5 meses

FCP_FGT_AD-7 6 FCP - FortiGate 7 6 Administrator Dumps
11 pág.

FCP_FGT_AD-7 6 FCP - FortiGate 7 6 Administrator Dumps

Respostas

User badge image

Ed Verified user icon

há 5 meses

Analisando as alternativas apresentadas sobre a limitação de usar uma lista de URLs e controle de aplicativos na mesma política de firewall em modo baseado em políticas NGFW: A. Limita a varredura do tráfego de aplicativos à categoria de tecnologia baseada em navegador apenas. - Esta opção sugere que a varredura se restringe apenas a tráfego que utiliza navegadores, o que não é totalmente correto, pois o controle de aplicativos pode abranger mais do que isso. B. Limita a varredura do tráfego de aplicativos ao protocolo DNS apenas. - Esta opção é incorreta, pois o tráfego de aplicativos não se limita apenas ao DNS. C. Limita a varredura do tráfego de aplicativos a usar apenas assinaturas pai. - Esta opção não é uma limitação típica associada ao uso de listas de URLs e controle de aplicativos. D. Limita a varredura do tráfego de aplicativos à categoria de aplicativo apenas. - Esta opção sugere que a varredura se restringe a categorias de aplicativos, o que é uma limitação real quando se usa listas de URLs e controle de aplicativos juntos. Após analisar as alternativas, a resposta correta é: A. Limita a varredura do tráfego de aplicativos à categoria de tecnologia baseada em navegador apenas.

Essa resposta te ajudou?

0
Dislike0

Ainda com dúvidas?

Envie uma pergunta e tenha sua dúvida de estudo respondida!

Essa pergunta também está no material:

FCP_FGT_AD-7 6 FCP - FortiGate 7 6 Administrator Dumps
11 pág.

FCP_FGT_AD-7 6 FCP - FortiGate 7 6 Administrator Dumps

Mais perguntas desse material

Refer to the exhibit. Which route will be selected when trying to reach 10.20.30.254?
A. 10.20.30.0/24 [10/0] via 172.20.167.254, port3, [1/0]
B. 10.30.20.0/24 [10/0] via 172.20.121.2, port1, [1/0]
C. 10.20.30.0/26 [10/0] via 172.20.168.254, port2, [1/0]
D. 0.0.0.0/0 [10/0] via 172.20.121.2, port1, [1/0]

What must you configure to enable proxy-based TCP session failover?
A. You must configure ha-configuration-sync under configure system ha.
B. You do not need to configure anything because all TCP sessions are automatically failed over.
C. You must configure session-pickup-enable under configure system ha.
D. You must configure session-pickup-connectionless enable under configure system ha.

An administrator needs to inspect all web traffic (including Internet web traffic) coming from users connecting to the SSL-VPN. How can this be achieved?
A. Assigning public IP addresses to SSL-VPN users
B. Configuring web bookmarks
C. Disabling split tunneling
D. Using web-only mode

FortiGate is operating in NAT mode and is configured with two virtual LAN (VLAN) subinterfaces added to the same physical interface. In this scenario, what are two requirements for the VLAN ID? (Choose two.)
A. The two VLAN subinterfaces can have the same VLAN ID, only if they have IP addresses in the same subnet.
B. The two VLAN subinterfaces can have the same VLAN ID, only if they belong to different VDOMs.
C. The two VLAN subinterfaces must have different VLAN IDs.
D. The two VLAN subinterfaces can have the same VLAN ID, only if they have IP addresses in different subnets.

An administrator has configured a strict RPF check on FortiGate. How does strict RPF check work?
A. Strict RPF allows packets back to sources with all active routes.
B. Strict RPF checks the best route back to the source using the incoming interface.
C. Strict RPF checks only for the existence of at least one active route back to the source using the incoming interface.
D. Strict RPF check is run on the first sent and reply packet of any new session.

The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) for Facebook. Users are given access to the Facebook web application. They can play video content hosted on Facebook, but they are unable to leave reactions on videos or other types of posts. Which part of the policy configuration must you change to resolve the issue?
A. Force access to Facebook using the HTTP service.
B. Make the SSL inspection a deep content inspection.
C. Add Facebook in the URL category in the security policy.
D. Get the additional application signatures required to add to the security policy.

Mais conteúdos dessa disciplina