EMEA Advanced Support 実際試験問題と解答 - 模擬練習 - 受験自信を増やす

Question No : 1
Which of the below technology(ies) could reduce CPU load and memory utilization used by an IPS engine?

A.IPS does not compare traffic to each signature individually. Instead it compiles them into a decision tree
B.Using IPS sensors and IPS filter to determine which traffic should be examined for which signatures, instead of examine network traffic for all signatures
C.Using multiple engines, aligned with load balancing technologies like Turbo that uses round robin algorithms to dispatch traffic up to specific IPS engine
D.Using regular instead of extended database, to reduce memory footprint
E.All of the above

正解:

Question No : 2
A Company is running an outdated version of a Webserver software that is vulnerable to multiple code execution and injection attacks.
Which Security feature can protect the Webserver until the security patches are applied?

A.Anti-virus Protection
B.Intrusion Detection System
C.Intrusion Prevention System
D.Anti rootkit Protection

正解:

Question No : 3
Which of the following are request methods in HTTP?

A.GET
B.LIST
C.HEAD
D.RETR

正解:

Question No : 4
Which protocols are used by an email client to retrieve emails?

A.SMTP
B.POP3
C.IMAP4
D.SNMP

正解:

Question No : 5
In Active FTP who sends the PORT command?

A.The FTP Client
B.The FTP Server
C.Both
D.There is no PORT command in Active FTP

正解:

Question No : 6
A firewall receives an out-of-order packet in a TCP session after the FIN/ACK and the packet is dropped as expected.
What parameter can be changed to prevent such drops?

A.TCP close-wait timer
B.TCP time-wait timer
C.Enable TCP option
D.TCPMSS

正解:

Question No : 7
Firewall is performing stateful inspection for TCP traffic between Client 10.0.0.21 and Server 172.16.1.200.

A.The ACK was not supposed to be sent to client 10.0.0.21
B.Traffic is Asymmetric and not allowed by the Firewall
C.Traffic should be allowed
D.Three way handshake was not completed

正解:

Question No : 8
Client is connected to firewall via link with MTU 1500 bytes, server is connected to firewall via link with MTU 1496 bytes. The firewall is rewriting both sender and receiver tcp-mss to 1450 bytes.
What maximum size of IP packets are we going to see when client connects to server?

A.1500 bytes
B.1496 bytes
C.1500 bits
D.1496 bits
E.1450 bytes
F.1450 bits

正解:

Question No : 9
How does a stateful firewall control a TCP session?

A.TCP ack numbers are used to control the session
B.TCP source ports are used to control the session
C.TCP destination ports are used to control the session
D.TCP sequence numbers and TCP flags are used to control the session

正解:

Question No : 10
Which statement is true about IPsec VPNs and SSL VPNs?

A.SSL VPN creates a HTTPS connection. IPsec does not
B.Both SSL VPNs and IPsec VPNs are standard protocols
C.Either a SSL VPN or an IPsec VPN can be established between an end-user workstation and a FortiGate device
D.All of the above

正解:

Question No : 11
Which of the following Authentication protocols uses clear text?

A.CHAP
B.PAP
C.MSCHAP
D.EAP

正解:

Question No : 12
Which parts of the IKE protocol below are responsible for authenticating the User (username/password) of a dialup IPsec tunnel? (Check all correct answers)

A.IKEv1 phase2
B.IKEv1 Xauth
C.IKEv2 EAP
D.IKEv1 phase1
E.IKEv2 SA_INIT

正解:

Question No : 13
What are the advantages of using a hub-and-spoke IPSec VPN configuration instead of a fully-meshed set of IPSec tunnels? (Select all that apply below)

A.Using a hub and spoke topology is required to achieve full redundancy.
B.Using a hub and spoke topology simplifies configuration because fewer tunnels are required.
C.Using a hub and spoke topology provides stronger encryption.
D.The routing table management is simpler because of fewer routes compared to a fully meshed node.

正解:

Question No : 14
What tool would you use to verify a certificate?

A.Nessus
B.OpenSSL
C.Hping
D.Certtester

正解:

Question No : 15
Which term refers to the OSPF router that connects area 0 to a nonbackbone area?

A.area boundary router
B.area border router
C.autonomous system boundary router
D.backbone router

正解:

Fortinet EMEA Advanced Support 問題練習