[May 10, 2024] Free SAP Certified Application Associate C-HRHFC-2311 Official Cert Guide PDF Download [Q40-Q59]

QUESTION 40
What is the effect of enabling auto-negotiate on the phase 2 configuration of an IPsec tunnel?

QUESTION 41
An employee needs to connect to the office through a high-latency internet connection.
Which SSL VPN setting should the administrator adjust to prevent SSL VPN negotiation failure?

QUESTION 42
In consolidated firewall policies, IPv4 and IPv6 policies are combined in a single consolidated policy. Instead of separate policies. Which three statements are true about consolidated IPv4 and IPv6 policy configuration? (Choose three.)

QUESTION 43
Refer to the exhibit.

An administrator has configured a performance SLA on FortiGate, which failed to generate any traffic.
Why is FortiGate not sending probes to 4.2.2.2 and 4.2.2.1 servers? (Choose two.)

QUESTION 44
Refer to the exhibits to view the firewall policy (Exhibit A) and the antivirus profile (Exhibit B).


Which statement is correct if a user is unable to receive a block replacement message when downloading an infected file for the first time?

QUESTION 45
View the exhibit.

Which of the following statements are correct? (Choose two.)

QUESTION 46
The HTTP inspection process in web filtering follows a specific order when multiple features are enabled in the web filter profile. What order must FortiGate use when the web filter profile has features enabled, such as safe search?

QUESTION 47
Which statement about the policy ID number of a firewall policy is true?

QUESTION 48
An administrator has configured the following settings:

What are the two results of this configuration? (Choose two.)

QUESTION 49
Which scanning technique on FortiGate can be enabled only on the CLI?

QUESTION 50
Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy-based inspection mode? (Choose two.)

QUESTION 51
Which two statements are correct regarding FortiGate HA cluster virtual IP addresses? (Choose two.)

QUESTION 52
Which statement about the IP authentication header (AH) used by IPsec is true?

QUESTION 53
What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?

QUESTION 54
Refer to the exhibit.
Refer to the FortiGuard connection debug output.

Based on the output shown in the exhibit, which two statements are correct? (Choose two.)

QUESTION 55
Which two types of traffic are managed only by the management VDOM? (Choose two.)

QUESTION 56
Refer to the exhibit.

The Root and To_Internet VDOMs are configured in NAT mode. The DMZ and Local VDOMs are configured in transparent mode.
The Root VDOM is the management VDOM. The To_Internet VDOM allows LAN users to access the internet. The To_Internet VDOM is the only VDOM with internet access and is directly connected to ISP modem .
With this configuration, which statement is true?

QUESTION 57
Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

QUESTION 58
Which three options are the remote log storage options you can configure on FortiGate? (Choose three.)

QUESTION 59
In an explicit proxy setup, where is the authentication method and database configured?