文档介绍：Exam : 925-201b
Title : Principles work Security and FortiGate
Configurations
Ver :
925-201b
QUESTION 1
Which of the following default factory setting is true about Fortigate unit?
:;http,http,ping,ssh access is enable
:;ping is enable
:;http,ping,ssh access is enable
:;ping & http is enable
Answer: A , B
QUESTION 2
Which of the following firmware upgrade method will cause configuration reset?
A. WebUI
B. CLI
C. Fortimanager
D. interrupt booting procedure by CLI
Answer: D
QUESTION 3
Which of the following statement about TCP MTU for Fortigate is true?
A. default MTU is 1500 bytes
B. For manual and DHCP addressing mode the MTU size can be from 576 to 1500 bytes
C. for PPPOE addressing mode the MTU size can be from 576 to 1492 bytes
D. default MTU is 1492 bytes
Answer: A , B, C
QUESTION 4
What is the valid method to fixup Fortigate interface speed&duplex?
A. via web GUI
B. via CLI
C. via auto update
D. via foritlog
Answer: B
Explanation :
via CLI ,
configsystem interface
edit internal
set speed ?
100full 100M full-duplex
100half 100M half-duplex
- The Power of Knowing
925-201b
10full 10M full-duplex
10half 10M half-duplex
auto auto adjust speed
QUESTION 5
What are the necessary procedure before using Xauth . ?
A. create user group
B. create firewall policy
C. enable IPSEC VPN
D. enable PPTP
Answer: A , B, C
QUESTION 6
Which one is the most efficient way to block MSN traffic by Fortigate unit ?
A. Use IPS module by applying protection profile
B. Use Antivirus engine
C. Use firewall policy
D. Use content filtering
Answer: A
QUESTION 7
What is the valid web script filtering option for web filtering ?
A. Java Applet
B. Worm
C. ActiveX
D. Cookie
Answer: A, C, D