Online Access Free C-HRHFC-2311 Exam Questions

Refer to the exhibit.

Given the security fabric topology shown in the exhibit, which two statements are true? (Choose two.)

• A.Device detection is disabled on all FortiGate devices.
• B.There are five devices that are part of the security fabric.
• C.This security fabric topology is a logical topology view.
• D.There are 19 security recommendations for the security fabric.

If the Services field is configured in a Virtual IP (VIP), which statement is true when central NAT is used?

• A.The Services field is used when you need to bundle several VIPs into VIP groups.
• B.The Services field prevents multiple sources of traffic from using multiple services to connect to a single computer.
• C.The Services field removes the requirement to create multiple VIPs for different services.
• D.The Services field prevents SNAT and DNAT from being combined in the same policy.

Refer to the exhibit.

Which contains a network diagram and routing table output.
The Student is unable to access Webserver.
What is the cause of the problem and what is the solution for the problem?

• A.The first reply packet for Student failed the RPF check.
  This issue can be resolved by adding a static route to 10.0.4.0/24 through wan1.
• B.The first packet sent from Student failed the RPF check.
  This issue can be resolved by adding a static route to 10.0.4.0/24 through wan1.
• C.The first reply packet for Student failed the RPF check .
  This issue can be resolved by adding a static route to 203.0. 114.24/32 through port3.
• D.The first packet sent from Student failed the RPF check.
  This issue can be resolved by adding a static route to 203.0. 114.24/32 through port3.

An administrator is configuring an Ipsec between site A and siteB. The Remotes Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192. 16. 1.0/24 and the remote quick mode selector is 192. 16.2.0/24. How must the administrator configure the local quick mode selector for site B?

• A.192. 168.0.0/8
• B.192. 168.3.0/24
• C.192. 168. 1.0/24
• D.192. 168.2.0/24

Refer to the exhibit.

Examine the intrusion prevention system (IPS) diagnostic command.
Which statement is correct If option 5 was used with the IPS diagnostic command and the outcome was a decrease in the CPU usage?

• A.The IPS engine was inspecting high volume of traffic.
• B.The IPS engine will continue to run in a normal state.
• C.The IPS engine was unable to prevent an intrusion attack .
• D.The IPS engine was blocking all traffic.