[2026] SAP Fortinet NSE 4 - FortiOS 7.2 - C_HRHFC

문제1

Which two statements explain antivirus scanning modes? (Choose two.)

A. In proxy-based inspection mode, antivirus scanning buffers the whole file for scanning, before sending it to the client.

B. In flow-based inspection mode, files bigger than the buffer size are scanned.

C. In proxy-based inspection mode, files bigger than the buffer size are scanned.

D. In flow-based inspection mode, FortiGate buffers the file, but also simultaneously transmits it to the client.

정답: A,D

설명: (Fast2test 회원만 볼 수 있음)

문제2

If the Issuer and Subject values are the same in a digital certificate, which type of entity was the certificate issued to?

A. A root CA

B. A subordinate CA

C. A person

D. A CRL

정답: A

문제3

An administrator is configuring an IPsec VPN between site A and site B. The Remote Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192. 168. 1.0/24 and the remote quick mode selector is 192. 168.2.0/24.
Which subnet must the administrator configure for the local quick mode selector for site B?

A. 192. 168. 1.0/24

B. 192. 168.2.0/24

C. 192. 168.0.0/24

D. 192. 168.3.0/24

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제4

Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides (client and server) have terminated the session?

A. To remove the NAT operation.

B. To generate logs

C. To allow for out-of-order packets that could arrive after the FIN/ACK packets.

D. To finish any inspection operations.

정답: C

문제5

A network administrator is configuring a new IPsec VPN tunnel on FortiGate. The remote peer IP address is dynamic. In addition, the remote peer does not support a dynamic DNS update service.
What type of remote gateway should the administrator configure on FortiGate for the new IPsec VPN tunnel to work?

A. Pre-shared Key

B. Static IP Address

C. Dialup User

D. Dynamic DNS

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제6

Examine the exhibit, which contains a virtual IP and firewall policy configuration.

The WAN (port1) interface has the IP address 10.200. 1. 1/24. The LAN (port2) interface has the IP address 10.0. 1.254/24.
The first firewall policy has NAT enabled on the outgoing interface address. The second firewall policy is configured with a VIP as the destination address. Which IP address will be used to source NAT the Internet traffic coming from a workstation with the IP address 10.0. 1. 10/24?

A. 10.200. 1. 1

B. Any available IP address in the WAN (port1) subnet 10.200. 1.0/24

C. 10.200. 1. 10

D. 10.0. 1.254

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제7

Which statement is correct regarding the use of application control for inspecting web applications?

A. Application control does not require SSL inspection to identity web applications.

B. Application control signatures are organized in a nonhierarchical structure.

C. Application control does not display a replacement message for a blocked web application.

D. Application control can identity child and parent applications, and perform different actions on them.

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제8

Refer to the exhibits.
Exhibit A

Exhibit B

The exhibit contains a network interface configuration, firewall policies, and a CLI console configuration.
How will FortiGate handle user authentication for traffic that arrives on the LAN interface?

A. If there is a fall-through policy in place, users will not be prompted for authentication.

B. All users will be prompted for authentication, users from the Sales group can authenticate successfully with the correct credentials.

C. All users will be prompted for authentication, users from the HR group can authenticate successfully with the correct credentials.

D. Authentication is enforced at a policy level; all users will be prompted for authentication.

정답: C

문제9

Which three criteria can a FortiGate use to look for a matching firewall policy to process traffic? (Choose three.)

A. Highest to lowest priority defined in the firewall policy.

B. Destination defined as Internet Services in the firewall policy.

C. Source defined as Internet Services in the firewall policy.

D. Services defined in the firewall policy.

E. Lowest to highest policy ID number.

정답: B,C,D

설명: (Fast2test 회원만 볼 수 있음)

SAP Fortinet NSE 4 - FortiOS 7.2 - C_HRHFC_2311무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트