App Control

Description

NSE4 6.0 NSE4 6.0 Quiz on App Control, created by Marcos Avila on 17/08/2018.
Marcos Avila
Quiz by Marcos Avila, updated more than 1 year ago
Marcos Avila
Created by Marcos Avila over 6 years ago
713
1

Resource summary

Question 1

Question
Which statement about the application control database is true?
Answer
  • a. The application control database is separate from the IPS database.
  • b. The application control database must be updated manually.

Question 2

Question
The application control profile consists of three different types of filters: (Select 3)
Answer
  • Categories
  • Application overrides
  • Filter overrides
  • Deny
  • Allow
  • Monitor

Question 3

Question
QUIC is a protocol from Google. Instead of using the standard TCP connections for web access it uses UDP which is not scanned by the web filtering. Allowing QUIC instructs FortiGate to inspect Google Chrome packets for a QUIC header and generate logs as a QUIC message. Blocking QUIC forces Google Chrome to use HTTP2/TLS1.2 and FortiGate to log the QUIC as blocked. The default action for QUIC is
Answer
  • Allow
  • Block.

Question 4

Question
Then, FortiGate scans packets for matches, in this order, for the application control profile: [blank_start]3. Categories:[blank_end] Finally, the application control profile applies the action that you've configured for applications in your selected Categories. [blank_start]1. Application Overrides:[blank_end] If you have configured any Application Overrides, the application control profile considers those first. it looks for a matching override starting at the top of the list, like firewall policies. [blank_start]2. Filter Overrides:[blank_end] If no matching application override exists, then the application control profile applies the action based on configured Filter Overrides.
Answer
  • 3. Categories:
  • 1. Application Overrides:
  • 2. Filter Overrides:

Question 5

Question
Application control profile actions: (Choose 4)
Answer
  • Allow
  • Monitor
  • Block
  • Quarantine
  • Warning
  • Default
  • Log only

Question 6

Question
Which statement about application control is true?
Answer
  • A. It uses the IPS engine to scan traffic for application patterns.
  • B. It is unable to scan P2P architecture traffic.

Question 7

Question
App control three different types of filters
Answer
  • Categories
  • Application overrides
  • Filter overrides
  • Signatures overrides

Question 8

Question
Allowing QUIC instructs FortiGate to inspect Google Chrome packets for a QUIC header and generate logs as a QUIC message. *Allow QUIC forces Google Chrome to use HTTP2/TLS1.2 and FortiGate to log the QUIC as blocked. The default action for QUIC is *Allow.
Answer
  • False
  • True

Question 9

Question
Scanning order
Answer
  • Categories > Application overrides > Filter overrides
  • Application overrides > Categories > Filter overrides
  • Application overrides > Filter overrides > Categories

Question 10

Question
Which statement about application control in NGFW policy-based configuration is true?
Answer
  • A. Applications are applied directly to the firewall policies.
  • B. The application control profile must be applied to firewall policies.

Question 11

Question
What statement about the HTTP block page for application control is true?
Answer
  • A. It can be used only for web applications.
  • B. It works for all types of applications.

Question 12

Question
Where do you enable logging of application control events?
Answer
  • A. Application control logs are enabled in the firewall policy configuration.
  • B. Application control logs are enabled on the Log & Report settings page of FortiGate.

Question 13

Question
Which of the following information will not be included in the application event log when using NGFW policy-based mode?
Answer
  • A. Application control profile name
  • B. Application name

Question 14

Question
Force FortiGate to check for new application control updates.
Answer
  • execute update-now
  • diagnose update-now
  • get execute update-now

Question 15

Question
Which TCP port does FortiGuard use for application control?
Answer
  • A. 53
  • B. 443

Question 16

Question
Which SSL/SSH inspection method is recommended for use with application control scanning to improve application detection?
Answer
  • A. Certificate-based inspection profile
  • B. Deep-inspection profile
Show full summary Hide full summary

Similar

Aggression mind-map for A2 AQA Psychology
poeticjustice
Biology Revision - Y10 Mock
Tom Mitchell
BIOLOGY B1 2
x_clairey_x
Physics: Energy resources and energy transfer
katgads
GCSE Chemistry C1.1 - Fundamental Ideas in Chemistry
chancice.branscombe
Modern Studies - Democracy in Scotland/UK.
Daniel Cormack
GCSE AQA Biology 1 Nerves & Hormones
Lilac Potato
A View from the Bridge
Mrs Peacock
Unit 1 flashcards
C R
exothermic and endothermic reactions
janey.efen
2PR101 1.test - 1. část
Nikola Truong