防火墙技术专栏

When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filter web requests when the client browser does notprovide the server name indication (SNI) extension?〖当使用SSL证书检查方法检查HTTPS流量时，当客户端浏览器没有提供服务器名称指示(SNI)扩展时，FortiG..

View the exhibit, which contains the output of get sys ha status, and then answer the question below.〖查看下列图片，其中包含get sys ha status的输出，然后回答下面的问题。〗　　Which statements are correct regarding the output? (Choose two.)〖哪些关于输出的语句是正确的?(选择两个)〗　　A. The slave...

View the IPS exit log, and thr the question below.〖查看IPS退出日志，可以看到下面的问题。〗　　# diagnose test application ipsmoitor 3　　ipsengine exit log" 　　pid = 93 (cfg), duration = 560533 (s) at Wed Apr19 09:57:26 2017 　　code = 11, reason: manual　　What is the...

Examine the following traffic log; then answer the question below. 〖检查以下流量日志；然后回答下面的问题。〗　　date-20xx-02-01 time=19:52:01 devname=master device_id="xxxxxxx" log_id=0100020007 　　type=event subtype=system pri critical vd=root service=kemel status=failur...

Which two conditions must be met for a statistic route to be active in the routing table?(Choose two.)〖一个统计路由在路由表中激活必须满足哪两个条件?(选择两个)〗　　A. The link health monitor (if configured) is up.〖链路运行状况监视器(如果已配置)已启动。〗　　B. There is no other route, to the same ...

Examine the output from the 'diagnose vpn tunnel list' command shown in the exhibit; then answer the question below. 〖查看下列图片，检查diagnose vpn tunnel list命令的输出，然后回答下面的问题。〗　　Which command can beused to sniffer the ESP traffic for the VPN DialUP_0? 〖哪个命令可..

Which of the following statements are true regardingthe SIP session helper and the SIP application layer gateway (ALG)? (Choose three.)〖关于SIP会话helper和SIP应用层网关(ALG)，下列哪个陈述是正确的?(选择三个)〗　　A. SIP session helper runs in the kernel; SIP ALG runs as a user spa..

What is the diagnose test application ipsmonitor 99 command used for? 〖diagnose test application ipsmonitor 99命令用于什么?〗　　A. To enable IPS bypass mode 〖启用IPS bypass模式〗　　B. To provide information regarding IPS sessions 〖提供关于IPS会话的信息〗　　C. To disable the.

Four FortiGate devices configured for OSPF connected to the same broadcast domain. The first unit is elected as the designated router The second unit is elected as the backup designated router Under normal operation, how many OSPF full adjacencies are for.

In which two states is a given session categorized as ephemeral? (Choose two.) 〖在哪个状态下，一个给定的会话被归类为短暂的?(选择两个)〗　　A. A TCP session waiting to complete the three-way handshake.〖等待完成三次握手的TCP会话。〗　　B. A TCP session waiting for FIN ACK.〖等待FIN ACK的TCP会话。〗　...

A FortiGate is rebooting unexpectedly without any apparent reason. What troubleshooting tools could an administrator use to get more information about the problem? (Choose two.)〖FortiGate在没有任何明显原因的情况下意外重启。管理员可以使用什么故障排除工具来获取有关问题的更多信息?(选择两个)〗　　A. Firewal..