Online Access Free C-HRHFC-2311 Practice Test

Refer to the exhibit.

Given the security fabric topology shown in the exhibit, which two statements are true? (Choose two.)

• A.Device detection is disabled on all FortiGate devices.
• B.There are 19 security recommendations for the security fabric.
• C.This security fabric topology is a logical topology view.
• D.There are five devices that are part of the security fabric.

Refer to the exhibit.

An administrator is running a sniffer command as shown in the exhibit.
Which three pieces of information are included in the sniffer output? (Choose three.)

• A.Packet payload
• B.Interface name
• C.Ethernet header
• D.Application header
• E.IP header

An administrator wants to configure Dead Peer Detection (DPD) on IPSEC VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when no traffic is observed in the tunnel.
Which DPD mode on FortiGate will meet the above requirement?

• A.On Idle
• B.Enabled
• C.On Demand
• D.Disabled

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 fails to come up. The administrator has also re-entered the pre-shared key on both FortiGate devices to make sure they match.

Based on the phase 1 configuration and the diagram shown in the exhibit, which two configuration changes will bring phase 1 up? (Choose two.)

• A.On HQ-FortiGate, set IKE mode to Main (ID protection).
• B.On both FortiGate devices, set Dead Peer Detection to On Demand.
• C.On Remote-FortiGate, set port2 as Interface.
• D.On HQ-FortiGate, disable Diffie-Helman group 2.

Which statement is correct regarding the security fabric?

• A.FortiGate devices must be operating in NAT mode.
• B.FortiManager is one of the required member devices.
• C.FortiGate Cloud cannot be used for logging purposes.
• D.A minimum of two Fortinet devices is required.