Online Access Free C_HRHFC_2311 Practice Test

FortiGate is operating in NAT mode and is configured with two virtual LAN (VLAN) subinterfaces added to the same physical interface.
In this scenario, which statement about VLAN IDs is true?

• A.The two VLAN subinterfaces can have the same VLAN ID only if they have IP addresses in the same subnet.
• B.The two VLAN subinterfaces can have the same VLAN ID only if they belong to different VDOMs.
• C.The two VLAN subinterfaces can have the same VLAN ID only if they have IP addresses in different subnets.
• D.The two VLAN subinterfaces must have different VLAN IDs.

Refer to the exhibits to view the firewall policy (Exhibit A) and the antivirus profile (Exhibit B).


Which statement is correct if a user is unable to receive a block replacement message when downloading an infected file for the first time?

• A.The flow-based inspection is used, which resets the last packet to the user.
• B.The firewall policy performs the full content inspection on the file.
• C.The volume of traffic being inspected is too high for this model of FortiGate.
• D.The intrusion prevention security profile needs to be enabled when using flow-based inspection mode.

What is the effect of enabling auto-negotiate on the phase 2 configuration of an IPsec tunnel?

• A.FortiGate automatically negotiates a new security association after the existing security association expires.
• B.FortiGate automatically negotiates different encryption and authentication algorithms with the remote peer.
• C.FortiGate automatically negotiates different local and remote addresses with the remote peer.
• D.FortiGate automatically brings up the IPsec tunnel and keeps it up, regardless of activity on the IPsec tunnel.

What are two features of collector agent advanced mode? (Choose two.)

• A.Advanced mode uses the Windows convention-NetBios: Domain\Username.
• B.Advanced mode supports nested or inherited groups.
• C.In advanced mode, FortiGate can be configured as an LDAP client and group filters can be configured on FortiGate.
• D.In advanced mode, security profiles can be applied only to user groups, not individual users.

Which statement about video filtering on FortiGate is true?

• A.Video filtering FortiGuard categories are based on web filter FortiGuard categories.
• B.Full SSL inspection is not required.
• C.It does not require a separate FortiGuard license.
• D.its available only on a proxy-based firewall policy.