Question 1
Question
Which statement about the application control database is true?
Question 2
Question
The application control profile consists of three different types of filters: (Select 3)
Answer
-
Categories
-
Application overrides
-
Filter overrides
-
Deny
-
Allow
-
Monitor
Question 3
Question
QUIC is a protocol from Google. Instead of using the standard TCP connections for web access it uses UDP which is not scanned by the web filtering. Allowing QUIC instructs FortiGate to inspect Google Chrome packets for a QUIC header and generate logs as a QUIC message. Blocking QUIC forces Google Chrome to use HTTP2/TLS1.2 and FortiGate to log the QUIC as blocked. The default action for QUIC is
Question 4
Question
Then, FortiGate scans packets for matches, in this order, for the application control profile:
[blank_start]3. Categories:[blank_end] Finally, the application control profile applies the action that you've configured for applications in your selected Categories.
[blank_start]1. Application Overrides:[blank_end] If you have configured any Application Overrides, the application control profile considers those first. it looks for a matching override starting at the top of the list, like firewall policies.
[blank_start]2. Filter Overrides:[blank_end] If no matching application override exists, then the application control profile applies the action based on configured Filter Overrides.
Question 5
Question
Application control profile actions: (Choose 4)
Answer
-
Allow
-
Monitor
-
Block
-
Quarantine
-
Warning
-
Default
-
Log only
Question 6
Question
Which statement about application control is true?
Question 7
Question
App control three different types of filters
Answer
-
Categories
-
Application overrides
-
Filter overrides
-
Signatures overrides
Question 8
Question
Allowing QUIC instructs FortiGate to inspect Google Chrome packets for a QUIC header and generate logs as a QUIC message. *Allow QUIC forces Google Chrome to use HTTP2/TLS1.2 and FortiGate to log the QUIC as blocked. The default action for QUIC is *Allow.
Question 9
Answer
-
Categories > Application overrides > Filter overrides
-
Application overrides > Categories > Filter overrides
-
Application overrides > Filter overrides > Categories
Question 10
Question
Which statement about application control in NGFW policy-based configuration is true?
Question 11
Question
What statement about the HTTP block page for application control is true?
Question 12
Question
Where do you enable logging of application control events?
Question 13
Question
Which of the following information will not be included in the application event log when using NGFW policy-based mode?
Question 14
Question
Force FortiGate to check for new application control updates.
Answer
-
execute update-now
-
diagnose update-now
-
get execute update-now
Question 15
Question
Which TCP port does FortiGuard use for application control?
Question 16
Question
Which SSL/SSH inspection method is recommended for use with application control scanning to improve application detection?