최신 Network Security NSE4 무료샘플문제:

1. Which of the following are considered log types? (Choose three.)

A) Event log
B) Security log
C) Syslog
D) Forward log
E) Traffic log

2. Which statement best describes the objective of the SYN proxy feature available in SP processors?

A) Accelerate the TCP 3-way handshake
B) Protect against SYN flood attacks.
C) Analyze the SYN packet to decide if the new session can be offloaded to the SP processor
D) Collect statistics regarding traffic sessions

3. Which statements are correct regarding application control? (Choose two.)

A) It is based on the IPS engine.
B) It is based on the AV engine.
C) It can be applied to SSL encrypted traffic.
D) It cannot be applied to SSL encrypted traffic.

4. Which best describe the mechanism of a TCP SYN flood?

A) The attacker sends a packet designed to "sync" with the FortiGate.
B) The attacker keeps open many connections with slow data transmission so that other clients cannot start new connections.
C) The attacker starts many connections, but never acknowledges to fully form them.
D) The attacker sends a specially crafted malformed packet, intended to crash the target by exploiting its parser.

5. How do you configure a FortiGate to apply traffic shaping to P2P traffic, such as
BitTorrent?

A) Apply a traffic shaper to a protocol options profile.
B) Define a DLP rule to match against BitTorrent traffic and include the rule in a DLP sensor with traffic shaping enabled.
C) Enable the shape option in a firewall policy with service set to BitTorrent.
D) Apply a traffic shaper to a BitTorrent entry in an application control list, which is then applied to a firewall policy.

질문과 대답: