Online Access Free C_HRHFC_2311 Exam Questions

What are two benefits of flow-based inspection compared to proxy-based inspection? (Choose two.)

• A.FortiGate performs a more exhaustive inspection on traffic.
• B.FortiGate adds less latency to traffic.
• C.FortiGate allocates two sessions per connection.
• D.FortiGate uses fewer resources.

Refer to the exhibit, which contains a static route configuration.
An administrator created a static route for Amazon Web Services.

Which CLI command must the administrator use to view the route?

• A.diagnose firewall proute list
• B.get internet-service route list
• C.get router info routing-table database
• D.get router info routing-table all

Refer to the exhibit.

Which contains a network diagram and routing table output.
The Student is unable to access Webserver.
What is the cause of the problem and what is the solution for the problem?

• A.The first packet sent from Student failed the RPF check.
  This issue can be resolved by adding a static route to 203.0. 114.24/32 through port3.
• B.The first reply packet for Student failed the RPF check .
  This issue can be resolved by adding a static route to 203.0. 114.24/32 through port3.
• C.The first packet sent from Student failed the RPF check.
  This issue can be resolved by adding a static route to 10.0.4.0/24 through wan1.
• D.The first reply packet for Student failed the RPF check.
  This issue can be resolved by adding a static route to 10.0.4.0/24 through wan1.

An administrator has a requirement to keep an application session from timing out on port 80. What two changes can the administrator make to resolve the issue without affecting any existing services running through FortiGate? (Choose two.)

• A.Set the session TTL on the HTTP policy to maximum
• B.Create a new service object for HTTP service and set the session TTL to never
• C.Create a new firewall policy with the new HTTP service and place it above the existing HTTP policy.
• D.Set the TTL value to never under config system-ttl

What are two functions of ZTNA? (Choose two.)

• A.ZTNA provides role-based access.
• B.ZTNA manages access for remote users only.
• C.ZTNA provides a security posture check.
• D.ZTNA manages access through the client only.