Grátis: FortiGate is operating in NAT mode and is configured with two virtual LAN (VLAN) subinterfaces added to the same physical interface. In this scenar... – Questões Respondidas

Português

Outros

FortiGate is operating in NAT mode and is configured with two virtual LAN (VLAN) subinterfaces added to the same physical interface. In this scenario, what are two requirements for the VLAN ID? (Choose two.)
A. The two VLAN subinterfaces can have the same VLAN ID, only if they have IP addresses in the same subnet.
B. The two VLAN subinterfaces can have the same VLAN ID, only if they belong to different VDOMs.
C. The two VLAN subinterfaces must have different VLAN IDs.
D. The two VLAN subinterfaces can have the same VLAN ID, only if they have IP addresses in different subnets.

há 5 meses

há 5 meses

FCP_FGT_AD-7 6 FCP - FortiGate 7 6 Administrator Dumps

FCP_FGT_AD-7 6 FCP - FortiGate 7 6 Administrator Dumps

Respostas

Ed

há 5 meses

Vamos analisar as alternativas apresentadas em relação ao funcionamento do FortiGate em modo NAT com subinterfaces VLAN. A. As duas subinterfaces VLAN podem ter o mesmo ID de VLAN, apenas se tiverem endereços IP na mesma sub-rede. - Isso não é correto, pois duas subinterfaces com o mesmo ID de VLAN não podem coexistir na mesma interface física, independentemente dos endereços IP. B. As duas subinterfaces VLAN podem ter o mesmo ID de VLAN, apenas se pertencem a diferentes VDOMs. - Isso é verdade, pois em diferentes VDOMs (Virtual Domains), o mesmo ID de VLAN pode ser utilizado sem conflito. C. As duas subinterfaces VLAN devem ter IDs de VLAN diferentes. - Isso é correto, pois, em uma única interface física, cada subinterface deve ter um ID de VLAN único. D. As duas subinterfaces VLAN podem ter o mesmo ID de VLAN, apenas se tiverem endereços IP em sub-redes diferentes. - Isso não é correto, pois o mesmo ID de VLAN não pode ser usado na mesma interface física, independentemente das sub-redes. Portanto, as duas alternativas corretas são: B e C.

Essa resposta te ajudou?

0

0

left-side-bubbles-background

right-side-bubbles-background

Crie sua conta grátis para liberar essa resposta. 🤩

Já tem uma conta?

Ao continuar, você aceita os Termos de Uso e Política de Privacidade

Ainda com dúvidas?

Envie uma pergunta e tenha sua dúvida de estudo respondida!

Essa pergunta também está no material:

FCP_FGT_AD-7 6 FCP - FortiGate 7 6 Administrator Dumps

FCP_FGT_AD-7 6 FCP - FortiGate 7 6 Administrator Dumps

Mais perguntas desse material

Refer to the exhibit. Which route will be selected when trying to reach 10.20.30.254?
A. 10.20.30.0/24 [10/0] via 172.20.167.254, port3, [1/0]
B. 10.30.20.0/24 [10/0] via 172.20.121.2, port1, [1/0]
C. 10.20.30.0/26 [10/0] via 172.20.168.254, port2, [1/0]
D. 0.0.0.0/0 [10/0] via 172.20.121.2, port1, [1/0]

What must you configure to enable proxy-based TCP session failover?
A. You must configure ha-configuration-sync under configure system ha.
B. You do not need to configure anything because all TCP sessions are automatically failed over.
C. You must configure session-pickup-enable under configure system ha.
D. You must configure session-pickup-connectionless enable under configure system ha.

An administrator needs to inspect all web traffic (including Internet web traffic) coming from users connecting to the SSL-VPN. How can this be achieved?
A. Assigning public IP addresses to SSL-VPN users
B. Configuring web bookmarks
C. Disabling split tunneling
D. Using web-only mode

What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?
A. It limits the scanning of application traffic to the browser-based technology category only.
B. It limits the scanning of application traffic to the DNS protocol only.
C. It limits the scanning of application traffic to use parent signatures only.
D. It limits the scanning of application traffic to the application category only.

An administrator has configured a strict RPF check on FortiGate. How does strict RPF check work?
A. Strict RPF allows packets back to sources with all active routes.
B. Strict RPF checks the best route back to the source using the incoming interface.
C. Strict RPF checks only for the existence of at least one active route back to the source using the incoming interface.
D. Strict RPF check is run on the first sent and reply packet of any new session.

The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) for Facebook. Users are given access to the Facebook web application. They can play video content hosted on Facebook, but they are unable to leave reactions on videos or other types of posts. Which part of the policy configuration must you change to resolve the issue?
A. Force access to Facebook using the HTTP service.
B. Make the SSL inspection a deep content inspection.
C. Add Facebook in the URL category in the security policy.
D. Get the additional application signatures required to add to the security policy.