925 201b

Fortinet 925-201b 3Com Certified Enterprise LAN Pre-Sales Expert version 3.2 104 Q&A Version: F9.0 www.CertifyMe.com

CertifyMe - King of Computer CertificationImportant Information, Please Read CarefullyOther CertifyMe productsA) Offline Testing engineUse the offline Testing engine product to practice the questions in an exam environment.B) Study Guide (not available for all exams)Build a foundation of knowledge which will be useful also after passing the exam.Latest VersionWe are constantly reviewing our products. New material is added and old material isupdated. Free updates are available for 90 days after the purchase. You should check yourmember zone at CertifyMe and update 3-4 days before the scheduled exam date.Here is the procedure to get the latest version:1.Go towww.certifyme.com2.Click on Member zone/Log in (right side)3. Then click My Account4.The latest versions of all purchased products are downloadable from here. Just click thelinks.For most updates,it is enough just to print the new questions at the end of the new version, not thewhole document.FeedbackIf you spot a possible improvement then please let us know. We always interested inimproving product quality.Feedback should be send to feedback@certifyme.com. You should include the following:Exam number, version, page number, question number, and your login ID.Our experts will answer your mail promptly.CopyrightEach PDF file contains a unique serial number associated with your particular name andcontact information for security purposes. So if we find out that a particular PDF file isbeing distributed by you, CertifyMe reserves the right to take legal action against youaccording to the International Copyright Laws.ExplanationsThis product does not include explanations at the moment. If you are interested inproviding explanations for this exam, please contact feedback@certifyme.com. www.CertifyMe.com

1. Which of the following default factory setting is true about Fortigate unit?A. internal: 192.168.1.99/24; http, https, ping, ssh access is enabledB. external: 192.168.100.99/24; ping is enabledC. internal: 192.168.1.99/24;https,ping,ssh access is enableD. external: 192.168.100.99/24;ping & http is enableAnswer: A , B2. Which of the following firmware upgrade method will cause configuration reset?A. WebUIB. CLIC. FortimanagerD. interrupt booting procedure by CLIAnswer: D3. Which of the following statement about TCP MTU for Fortigate is true?A. default MTU is 1500 bytesB. For manual and DHCP addressing mode the MTU size can be from 576 to 1500 bytesC. for PPPOE addressing mode the MTU size can be from 576 to 1492 bytesD. default MTU is 1492 bytesAnswer: A , B, C4. What is the valid method to fixup Fortigate interface speed&duplex?A. via web GUIB. via CLIC. via auto updateD. via foritlogAnswer: B5. What are the necessary procedure before using Xauth . ?A. create user groupB. create firewall policyC. enable IPSEC VPND. enable PPTPAnswer: A , B, C6. Which one is the most efficient way to block MSN traffic by Fortigate unit ?A. Use IPS module by applying protection profileB. Use Antivirus engineC. Use firewall policyD. Use content filtering www.CertifyMe.com

Answer: A7. What is the valid web script filtering option for web filtering ?A. Java AppletB. WormC. ActiveXD. CookieAnswer: A, C, D8. What is the best way to implement Fortigate HA ?A. connect corresponding interface to individual switchB. connect all interface to the same hub or switchC. connect corresponding interface directly using cross-over cableD. connect corresponding interface directly using straight-through cableAnswer: A9. What is the valid address object in Fortigate unit ?A. 10.1.1.1 / 255.255.255.0B. 10.1.1.1 / 255.255.255.255C. 10.1.1.1 / 255.255.255.248D. 10.1.1.1 / 255.255.255.252Answer: B10. What is the valid network in FortigateA. 10.1.1.0 / 255.255.255.0B. 10.1.1.1 / 255.255.255.0C. 10.1.1.0 / 255.255.255.255D. 10.1.1.0 / 255.255.0.0Answer: B, D11. What is the valid ipsec phase 1 optionA. desB. 3desC. md5D. sha1Answer: A , B12. what is the valid ipsec pahse 2 optionA. desB. 3desC. md5 www.CertifyMe.com

D. sha1Answer: C, D13. What is valid router object of Fortigate unit ?A. prefix listB. route mapC. key chain listD. access listAnswer: A , B, C14. What service can protection profile protect?A. ftpB. IMAPC. POP3D. httpE. SMTPAnswer: A , B, C , D , E15. What is the default protection profile ?A. strictB. scanC. webD. unfilteredAnswer: A , B, C , D16. What are the valid option in web filtering ?A. content blockB. url blockC. exempt listD. script filteringAnswer: A , B, C , D17. What is the valid IPS option ?A. IPS signatureB. IPS anomalyC. IPS engineD. IPS listAnswer: A , D18. Which logging can enable when enable protection profile content log?A. HTTP www.CertifyMe.com

B. FTPC. IMAPD. POP3E. SMTPAnswer: A , B, C , D19. What is the valid option of Fortigate HA scheduleA. none , hub , least-connection , round-robinB. weighted round-robin , random , ip , ip portC. switch , ip , ip portD. priority , hub , least-connectionAnswer: A , B20. Which command can show HA status ?A. get system statusB. diag sys ha statusC. exec ha maga 1D. get sys licE. config haAnswer: A , b , ,C21. What is the correct match order to choose a cluster master ?1. monitor port priority.2. Age.3.Unit Priority.4.Serial numberA. 1 , 2 , 3 , 4B. 1 , 3 , 2 , 4C. 2 , 1 , 3 , 4D. 2 , 4 , 1 , 3E. 4 , 1 , 3 , 2Answer: A22. IPSEC VPN support which of the following DH group ?A. 1B. 2C. 3D. 4E. 5 www.CertifyMe.com

Answer: A , B, E23. what is the mechanism for processing DH groupA. to generate session keyB. to generate pre-share keyC. to generate public keyD. to generate private keyAnswer: A24. Fortigatesupport which of the following client mode ,A. ipsecB. latpC. pptpD. l2fAnswer: A , B, C25. Fortigateuse port 9443 to do what functionA. to communicate with proxy serverB. to run push updateC. to communicate with syslog serverD. to communicate with Fortilog serverAnswer: B26. Whats the difference between RIP V1 & V2 ?A. carry more informationB. support simple authenticationC. support subnet maskD. support encryptionAnswer: A , B, C27. Which one of the following command could show HA information of fortigateA. get system statusB. diag sys ha statusC. exec ha mamane 1D. diag deb enaAnswer: A , B, C28. What is the max hop of RIP ?A. 13B. 14C. 15 www.CertifyMe.com

D. 16Answer: C29. What is the max metric can be configured in route sidtributionA. 13B. 14C. 15D. 16Answer: D30. What are the valid dhcp server option ,A. noneB. dhcp serverC. dhcp relay agentD. dhcp forwardingAnswer: A , B, C31. what port is used between Fortigate to transmit log message to ForitlogA. tcp 514B. udp 514C. tcp 69D. udp 69Answer: B32. What is the correct protocol number for TCP(6) & UDP(17) ,A. TCP / 6 , UDP / 17B. TCP / 16 , UDP 117C. TCP / 66 , UDP / 77D. TCP / 106 , UDP / 107Answer: A33. Which of the following Fortigate components can not be renameA. scheduleB. predefine serviceC. address groupD. network rangeAnswer: A , B, C , D34. Which of the following Traffic shaping parameter can be configured ?A. scheduleB. traffic priority www.CertifyMe.com

C. max bandwidthD. guarantee bandwidthAnswer: B, C , D35. What is the correct policy order ,A. encrypt->accept->deny allB. encrypy->deny->accept->deny allC. accept->encrypt->denyD. deny->encrypt->acceptAnswer: A36. Best describe the feature of firewall policy :A. if there is no preceding matching policy the packet is droppedB. the primary function of firewallC. policy can not be applied on user groupD. policy can not be applied with protection profileAnswer: A37. Where can protection profile be applied on ?A. policyB. groupC. serviceD. url filterAnswer: A , B38. What is the valid log storage for Fortigate unit ?A. syslog serverB. webtrendC. local diskD. memory bufferE. fortilogAnswer: A , B, C , d , e39. What is the valid IPS action when configure IPS signature ?A. logB. dropC. reset client , reset serverD. passE. clear sessionF. reset www.CertifyMe.com

Answer: A , B, C , d , e , f40. What is the most efficient way to disable IPS signature ?A. set action to passB. no loggingC. set to dropD. set to clearAnswer: A , B41. Which of the following predefined dissector signature have configurable parameter?A. http headerB. IMC. P2PD. rcp decoderE. cp-reassembleAnswer: A , B, C , D , E42. What is the statistical anomaly type for the TCP , UDP , & ICMP protocols that Fortigate IPS identified ?A. floodingB. scanC. sourceD. destination session limitAnswer: A , B, C , D43. When creating protection profile with configuring antivirus scanning , what service can be protected byenabling virus scan & file blockingA. HTTPB. FTPC. IMAP , POP3 , SMTPD. TELNETAnswer: A , B, C44. When creating protection profile with configuring antivirus scanning , we can disabling passing offragment emails for ?A. HTTPB. FTPC. IMAP , POP3 , SMTPD. TELNETAnswer: C45. When creating protection profile with configuring antivirus scanning ,we can select an action ( pass or www.CertifyMe.com

Pass Your Exam at First Attempt with 100% Pass Guarantee Buy Full Version of 925-201b Exam at http://www.certifyme.com/925-201b.htm

925 201b

by richee87

Accessibility

Categories

Upload Details

Usage Rights

Statistics

925 201b Document Transcript