[Aug-2024 Newly Released] C-HRHFC-2311 Exam Questions For You To Pass [Q57-Q79]

NO.57 An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

NO.58 Refer to the exhibit to view the application control profile.

Based on the configuration, what will happen to Apple FaceTime?

NO.59 Refer to the exhibit showing a debug flow output.

What two conclusions can you make from the debug flow output? (Choose two.)

NO.60 Which two statements are correct regarding FortiGate HA cluster virtual IP addresses? (Choose two.)

NO.61 An administrator is configuring an Ipsec between site A and siteB. The Remotes Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192. 16. 1.0/24 and the remote quick mode selector is 192. 16.2.0/24. How must the administrator configure the local quick mode selector for site B?

NO.62 Refer to the exhibit.

Examine the intrusion prevention system (IPS) diagnostic command.
Which statement is correct If option 5 was used with the IPS diagnostic command and the outcome was a decrease in the CPU usage?

NO.63 Which two settings can be separately configured per VDOM on a FortiGate device? (Choose two.)

NO.64 Refer to the exhibit.

Given the security fabric topology shown in the exhibit, which two statements are true? (Choose two.)

NO.65 Which two inspection modes can you use to configure a firewall policy on a profile-based next-generation firewall (NGFW)? (Choose two.)

NO.66 In an explicit proxy setup, where is the authentication method and database configured?

NO.67 Refer to the exhibits.
The exhibits show the firewall policies and the objects used in the firewall policies.
The administrator is using the Policy Lookup feature and has entered the search criteria shown in the exhibit.

Which policy will be highlighted, based on the input criteria?

NO.68 Refer to the exhibit.

Given the routing database shown in the exhibit, which two statements are correct? (Choose two.)

NO.69 FortiGate is operating in NAT mode and is configured with two virtual LAN (VLAN) subinterfaces added to the same physical interface.
In this scenario, what are two requirements for the VLAN ID? (Choose two.)

NO.70 The IPS engine is used by which three security features? (Choose three.)

NO.71 Which two statements are true when FortiGate is in transparent mode? (Choose two.)

NO.72 Which statement describes a characteristic of automation stitches?

NO.73 Refer to exhibit.
An administrator configured the web filtering profile shown in the exhibit to block access to all social networking sites except Twitter. However, when users try to access twitter.com, they are redirected to a FortiGuard web filtering block page.

Based on the exhibit, which configuration change can the administrator make to allow Twitter while blocking all other social networking sites?

NO.74 An administrator does not want to report the logon events of service accounts to FortiGate. What setting on the collector agent is required to achieve this?

NO.75 Which two statements are correct regarding FortiGate FSSO agentless polling mode? (Choose two.)

NO.76 When a firewall policy is created, which attribute is added to the policy to support recording logs to a FortiAnalyzer or a FortiManager and improves functionality when a FortiGate is integrated with these devices?

NO.77 Which scanning technique on FortiGate can be enabled only on the CLI?

NO.78 Refer to the exhibit.

Which contains a session diagnostic output. Which statement is true about the session diagnostic output?

NO.79 Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)