QUESTION: 61

Which statement about the IP authentication header (AH) used by IPsec is true?

AH does not provide any data integrity or encryption.
AH does not support perfect forward secrecy.
AH provides data integrity but no encryption.
AH provides strong data integrity but weak encryption.

Answer(s): C

QUESTION: 62

If the Services field is configured in a Virtual IP (VIP), which of the following statements is true when central NAT is used?

The Services field removes the requirement of creating multiple VIPs for different services.
The Services field is used when several VIPs need to be bundled into VIP groups.
The Services field does not allow source NAT and destination NAT to be combined in the same policy.
The Services field does not allow multiple sources of traffic, to use multiple services, to connect to a single computer.

Answer(s): A

Reveal Solution Next Question

QUESTION: 63

Examine this explicit web proxy configuration:

What filter can be used u, the command diagnose sniffer packet to capture the traffic between the client and the explicit web pray?

‘host 10.0.0.50 and port 80’
‘host 192.168.0.1 and port 80’
‘host 192.168.0.2 and port 8080’
‘host 10.0.50.1 and port 8080’

Answer(s): B

Reveal Solution Next Question

View the exhibit.

VDOM1 is operating is transparent mode VDOM2 is operating in NAT Route mode. There is an inter- VDOM link between both VDOMs. A client workstation with the IP address 10.0.1.10/24 is connected to port2. A web server with the IP address 10.200.1.2/24 is connected to port1.
What is required in the FortiGate configuration to route and allow connections from the client workstation to the web server? (Choose two.)

A static or dynamic route in VDOM2 with the subnet 10.0.1.0/24 as the destination.
A static or dynamic route in VDOM1 with the subnet 10.200.1.0/24 as the destination.
One firewall policy in VDOM1 with port2 as the source interface and InterVDOM0 as the destination interface.
One firewall policy in VDOM2 with InterVDOM1 as the source interface and port1 as the destination interface.

Answer(s): A,C

Reveal Solution Next Question

Free NSE4_FGT-6.2 Exam Braindumps (page: 16)

QUESTION: 61

QUESTION: 62

QUESTION: 63

QUESTION: 64