최신Fortinet FCSS - Enterprise Firewall 7.6 Administrator - FCSS_EFW_AD-7.6무료샘플문제

A. The administrator must reconfigure the cluster in FGSP mode.

B. The administrator must reconfigure the monitor interface.

C. The administrator must reconfigure the cluster in active-active mode.

D. The administrator must reconfigure the heartbeat interface.

A. The wildcard for the domain *.fortinet-ca2.support.fortinet.com must be supported by FortiManager Cloud.

B. FortiGate will receive a certificate that supports multiple domains because FortiManager operates in a cloud computing environment.

C. FortiGate is connecting to the same IP server and will receive an independent certificate for its connection between FortiGate and FortiManager Cloud.

D. If the TLS handshake contains 17 cipher suites it means the TLS version must be 1.0 on this three-way handshake.

A. Offloading the packets directly to the content processor (CP)

B. Data encryption and decryption

C. Installation of the session key in the network processor (NP)

D. Security inspections such as ACL, HPE, and IP integrity header checking

A. Change the router ID to 0.0.0.65

B. Change the network type to point-to-multipoint

C. Change the router ID to 0.0.0.95

D. Change the router priority to 200

A. Header change

B. Largest payload

C. Allow/Deny

D. Fragment only

A. The TCP packet modifies the packet size only if no fragmentation occurs.

B. The maximum segment size permitted in the firewall policy determines whether TCP packets are allowed or denied.

C. The commands affect the payload size of the packet and the size of the IP header for handling TCP packets.

D. Applying commands in a firewall policy determines the largest payload a device can handle in a single TCP segment.

A. Use the IPS profile extension to select an operating system, protocol, and application for all the network internal services and users to prevent false positives.

B. Install missing or expired SSUTLS certificates on the client PC to prevent expected false positives.

C. Enable Scan Outgoing Connections to avoid clicking suspicious links or attachments that can deliver botnet malware and create false positives.

D. Use an IPS profile with action monitor, however, the administrator must be aware that this can compromise network integrity.

A. Set an access list in the AS boundary FortiGate.

B. Set the area 0.0.0.1 to the type NSSA in the area border FortiGate.

C. Set the area 0.0.0.1 to the type STUB in the area border FortiGate.

D. Set a route map in the AS boundary FortiGate.

A. Specify an SSLISSH inspection profile on a consolidated policy.

B. Configure central source network address translation (SNAT), if NAT is required.

C. Create an application control profile and apply the profile to a firewall policy.

D. Configure the action as quarantine, if an application requires feedback to prevent instability.