考题篇(5.2) 22. 硬件加速 ❀ FortiGate ❀ Fortinet 网络安全专家 NSE 4

Which is one of the conditions that must be met for offloading the encryption and decryption of IPsec traffic to an NP6 processor? 〖卸载加密和解密的IPsec流量到NP6处理器哪个是必须达到的条件?〗

　　A. No protection profile can be applied over the IPsec traffic. 〖没有保护配置文件可以应用在IPsec流量〗

　　B. Phase-2 anti-replay must be disabled. 〖阶段2 anti-replay 必须禁止〗

　　C. Both the phase 1 and phases 2 must use encryption algorithms supported by the NP6. 〖阶段1和阶段2必须使用NP6支持的加密算法〗

　　D. IPsec traffic must not be inspected by any FortiGate session helper. 〖IPsec流量不得接受任何FortiGate会话助手〗

　　【分析】

　　【答案】Ｃ

Which statements are true about offloading antivirus inspection to a Security Processor (SP)? (Choose two)〖哪些关于卸载杀毒软件检查安全处理器(SP)的描述是真的? (选择两个)〗

　　A. Both proxy-based and flow-based inspection are supported.〖基于代理和基于流的检查都是支持的〗

　　B. A replacement message cannot be presented to users when a virus has been detected.〖当检测到病毒的时候替换消息不能提交给用户〗

　　C. It saves CPU resources.〖它节省了CPU资源〗

　　D. The ingress and egress interfaces can be in different SPs.〖可以在不同的入口和出口接口SPs〗

　　【分析】

　　【答案】ＢＣ

Which IP packets can be hardware-accelerated by a NP6 processor? (Choose two)〖哪些IP数据包可以被NP6处理器硬件加速? (选择两个)〗

　　A. Fragmented packet.〖碎片数据包〗

　　B. Multicast packet.〖多播数据包〗

　　C. SCTP packet.〖SCTP数据包〗

　　D. GRE packet.〖GRE数据包〗

　　【分析】

　　【答案】ＢＣ

Two FortiGate units with NP6 processors form an active-active cluster. The cluster is doing security profile (UTM) inspection over all the user traffic. What statements are true regarding the sessions that the master unit is offloading to the slave unit for inspection? (Choose two) 〖两个FortiGate设备NP6处理器形成一个主主集群，集群做安全配置文件(UTM)检查所有用户流量，哪些关于主设备卸载从设备检查会话的描述是真的？ (选择两个)〗

　　A. They are accelerated by hardware in the master unit.〖他们在主设备硬件加速〗

　　B. They are not accelerated by hardware in the master unit. 〖他们在主设备没有硬件加速〗

　　C. They are accelerated by hardware in the slave unit.〖他们在从设备硬件加速〗

　　D. They are not accelerated by hardware in the slave unit.〖他们在从设备没有硬件加速〗

　　【分析】

　　【答案】ＡＤ

 

　　【资料】

　　1、Fortinet NSE4 学习中文PPT下载地址：http://download.csdn.net/detail/meigang2012/9834613

　　2、Fortinet NSE4 学习英文PPT下载地址：http://download.csdn.net/detail/meigang2012/9834609

 

飞塔技术-老梅子   QQ：57389522

 

---