Online Access Free C_HRHFC_2311 Exam Questions

On FortiGate, which type of logs record information about traffic directly to and from the FortiGate management IP addresses?

• A.Security logs
• B.Local traffic logs
• C.Forward traffic logs
• D.System event logs

Examine this PAC file configuration.
Which of the following statements are true? (Choose two.)

• A.Browsers can be configured to retrieve this PAC file from the FortiGate.
• B.Any web request to the 172.25. 120.0/24 subnet is allowed to bypass the proxy.
• C.Any web request fortinet.com is allowed to bypass the proxy.
• D.All requests not made to Fortinet.com or the 172.25. 120.0/24 subnet, have to go through altproxy.corp.com: 8060.

An administrator does not want to report the logon events of service accounts to FortiGate. What setting on the collector agent is required to achieve this?

• A.Add user accounts to the FortiGate group fitter.
• B.Add the support of NTLM authentication.
• C.Add user accounts to Active Directory (AD).
• D.Add user accounts to the Ignore User List.

In consolidated firewall policies, IPv4 and IPv6 policies are combined in a single consolidated policy. Instead of separate policies. Which three statements are true about consolidated IPv4 and IPv6 policy configuration? (Choose three.)

• A.The IP version of the sources and destinations in a policy must match.
• B.The policy table in the GUI will be consolidated to display policies with IPv4 and IPv6 sources and destinations.
• C.The Incoming Interface. Outgoing Interface. Schedule, and Service fields can be shared with both IPv4 and IPv6.
• D.The policy table in the GUI can be filtered to display policies with IPv4, IPv6 or IPv4 and IPv6 sources and destinations.
• E.The IP version of the sources and destinations in a firewall policy must be different.

What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?

• A.It limits the scanning of application traffic to the application category only.
• B.It limits the scanning of application traffic to the DNS protocol only.
• C.It limits the scanning of application traffic to the browser-based technology category only.
• D.It limits the scanning of application traffic to use parent signatures only.