Fortinet Network Security Expert 4 Written Exam (400) 認定 NSE4 試験問題:

1. Where are most of the security events logged?

A) Event log
B) Forward Traffic log
C) Alert Monitoring Console
D) Security log
E) Alert log

2. Which of the following statements are true about IPsec VPNs? (Choose three.)

A) IPsec increases overhead and bandwidth.
B) End-user's network applications must be properly pre-configured to send traffic across the IPsec VPN.
C) IPsec operates at the layer 3 of the OSI model.
D) IPsec operates at the layer 2 of the OSI model.
E) IPsec protects upper layer protocols.

3. When firewall policy authentication is enabled, which protocols can trigger an authentication challenge? (Choose two.)

A) SMTP
B) FTP
C) POP3
D) HTTP

4. You are creating a custom signature. Which has incorrect syntax?

A) F-SBID(--name "Ping.Death";--protocol icmp;--data_size>32000;)
B) F-SBID(--name "Block".HTTP.POST"; --protocol tcp;-- service HTTP;-- flow from_client;
--pattern "POST"; -- context uri;--within 5,context;)
C) F-SBID(--name "Block.SMTP.VRFY.CMD";--pattern "vrfy";-- service SMTP; --no_case;-- context header;)
D) F-SBID(--attack_id 1842,--name "Ping.Death";--protocol icmp; --data_size>32000;)

5. An end user logs into the full-access SSL VPN portal and selects the Tunnel Mode option by clicking on the "Connect" button. The administrator has enabled split tunneling.

Given that the user authenticates against the SSL VPN policy shown in the image below, which statement below identifies the route that is added to the client's routing table.

A) A route to the destination matching the `all' address object.
B) A route to destination matching the `WIN2K3' address object.
C) A default route.
D) No route is added.

質問と回答：