15095172
Descripción
Test por Marcos Avila, actualizado hace más de 1 año
|
Creado por Marcos Avila
hace casi 6 años
|
|
Pregunta 1
Pregunta
La mayoria de las VPNs son SSL o IPsec, FortiOS soporta ambas, incluso las mas debiles en seguridad como PPTP.
Respuesta
- True
- False
Pregunta 2
Pregunta
SSL resides higher upon the network stack than IP and; therefore, it usually requires less bits—less bandwidth—for SSL-VPN headers.
Respuesta
- True
- False
Pregunta 3
Pregunta
lPsec uses some special protocols. The primary protocol is ESP, which encapsulates and encrypts UDP, RDP, HTTP, or other protocols that are inside in the lPsec tunnel.
Respuesta
- True
- False
Pregunta 4
Respuesta
-
SSL-VPN
-
IPsec VPN
Pregunta 5
Respuesta
-
SSL
-
IPsec
Pregunta 6
Pregunta
What does a VPN do?
Respuesta
-
A. Extends a private network across a public network
-
B. Protects a network from external attacks
Pregunta 7
Pregunta
Which statements about lPsec and SSL VPNs are true?
Respuesta
-
A. Either an SSL-VPN or an lPsec VPN can be established between two FortiGate devices.
-
B. Either an SSL-VPN or an lPsec VPN can be established between an end-user workstation and a FortiGate device.
Pregunta 8
Pregunta
SSL - VPN deployment modes
Respuesta
-
Tunnel mode Web mode
-
Web tunnel mode
Pregunta 9
Pregunta
Requires only a web browser
Supports a limited number of protocols:
- Citrix, FTP, HTTP/HTTPS, Port Forward, RDP, SMB/CIFS, SSH, Telnet, VNC, and Ping
Respuesta
-
Tunnel mode
-
Web mode
Pregunta 10
Pregunta
Accessed through a standalone client
Requires a virtual adapter on the client’s host
Respuesta
-
Tunnel mode
-
Web mode
Pregunta 11
Pregunta
Web access is the simplest SSL-VPN mode.
Respuesta
- True
- False
Pregunta 12
Pregunta
All traffic routes through an SSL-VPN tunnel to a remote FortiGate, then to the destination. This includes Internet traffic.
An egress firewall policy is required.
Traffic inspection and security features are applied.
Respuesta
-
Split tunneling disabled
-
Split tunneling enabled
Pregunta 13
Pregunta
Only traffic destined for the private network is routed through the remote FortiGate.
Internet traffic uses the local gateway; unencrypted route.
Conserves bandwidth and alleviates bottlenecks.
Respuesta
-
Split tunneling disable
-
Split tunneling enabled
Pregunta 14
Pregunta
A web-mode SSL-VPN user connects to a remote web server. What’s the source IP address of the HTTP request the web server receives?
Respuesta
-
A. The remote user's IP address
-
B. The FortiGate device's internal IP address
Pregunta 15
Pregunta
Which statements about tunnel-mode SSL-VPN are correct?
Respuesta
-
A. It supports split tunneling.
-
B. It requires a bookmarks.
Pregunta 16
Pregunta
A web-mode SSL-VPN user accesses internal network resources by using :
Respuesta
-
A. Bookmarks
-
B. FortiClient
Pregunta 17
Pregunta
Which of the following steps is necessary to configure SSL-VPN connections?
Respuesta
-
A. Create firewall policies to and from the SSL-VPN interface.
-
B. Enable event logs for SSL-VPN traffic: users, VPN, and endpoints.
Pregunta 18
Pregunta
What action may allow Internet access to SSL-VPN users in tunnel mode if the remote network does not have Internet access?
Respuesta
-
A. Enable split tunneling
-
B. Configure the DNS server to use the same as the client’s system DNS.
Pregunta 19
Respuesta
-
SSL-VPN Realms
-
SSL-VPN Personal bookmarks
Pregunta 20
Pregunta
Which statement about SSL-VPN realms is correct?
Respuesta
-
A. Allow access to different SSL-VPN portals by user groups.
-
B. Allow unlimited concurrent SSL-VPN users.
Pregunta 21
Pregunta
Which FortiGate interface allows administrators to create user-specific bookmarks?
Respuesta
-
A. Command line interface (CLI)
-
B. Graphical user interface (GUI)
Pregunta 22
Pregunta
Why is it necessary to run a client integrity check (host—chec k)?
Respuesta
-
A. To check whether specific security software is running on SSL-VPN users’ computers
-
B. To check whether a specific security certificate is running on SSL-VPN users’ web browsers
Pregunta 23
Pregunta
Which security action restricts SSL-VPN connections from users located in a specific country or region?
Respuesta
-
A. Restricting hosts by MAC address
-
B. Restricting hosts by IP address
Pregunta 24
Pregunta
To view the status of SSL-VPN acceleration, use the following command:
Respuesta
-
get vpn status ssl hw-acceleration-status
-
get vpn ssl status hw-acceleration
Pregunta 25
Pregunta
What does the SSL-VPN monitor feature allow you to do?
Respuesta
-
A. Monitor SSL-VPN user actions, such as authentication.
-
B. Force SSL-VPN user disconnections.
Pregunta 26
Pregunta
Which statements about SSL-VPN timers are correct?
Respuesta
-
A. SSL-VPN timers can avoid logouts when SSL-VPN users experience long network latency.
-
B. The login timeout is a non-customizable hard value.
¿Quieres crear tus propios Tests gratis con GoConqr? Más información.