C-HRHFC-2311 試験問題を無料オンラインアクセス

What are two benefits of flow-based inspection compared to proxy-based inspection? (Choose two.)

• A.FortiGate allocates two sessions per connection.
• B.FortiGate performs a more exhaustive inspection on traffic.
• C.FortiGate uses fewer resources.
• D.FortiGate adds less latency to traffic.

Refer to the exhibit showing a debug flow output.

Which two statements about the debug flow output are correct? (Choose two.)

• A.The debug flow is of ICMP traffic.
• B.A new traffic session is created.
• C.A firewall policy allowed the connection.
• D.The default route is required to receive a reply.

Refer to the exhibits.
Exhibit A shows the application sensor configuration. Exhibit B shows the Excessive-Bandwidth and Apple filter details.


Based on the configuration, what will happen to Apple FaceTime if there are only a few calls originating or incoming?

• A.Apple FaceTime will be allowed, based on the Categories configuration.
• B.Apple FaceTime will be blocked, based on the Excessive-Bandwidth filter configuration.
• C.Apple FaceTime will be allowed, based on the Apple filter configuration.
• D.Apple FaceTime will be allowed only if the Apple filter in Application and Filter Overrides is set to Allow.

An administrator configures FortiGuard servers as DNS servers on FortiGate using default settings.
What is true about the DNS connection to a FortiGuard server?

• A.It uses UDP 8888.
• B.It uses DNS overTLS.
• C.It uses UDP 53.
• D.It uses DNS over HTTPS.

Refer to the exhibit.

The Root and To_Internet VDOMs are configured in NAT mode. The DMZ and Local VDOMs are configured in transparent mode.
The Root VDOM is the management VDOM. The To_Internet VDOM allows LAN users to access the internet. The To_Internet VDOM is the only VDOM with internet access and is directly connected to ISP modem .
With this configuration, which statement is true?

• A.Inter-VDOM links are required to allow traffic between the Local and DMZ VDOMs.
• B.Inter-VDOM links are required to allow traffic between the Local and Root VDOMs.
• C.A static route is required on the To_Internet VDOM to allow LAN users to access the internet.
• D.Inter-VDOM links are not required between the Root and To_Internet VDOMs because the Root VDOM is used only as a management VDOM.