Book3 Flashcards

1
Q

IPSEC - What is the difference between “On demand vs On Idle” for DPD

A

The critiria to send the probe, one only sends when there’s no traffic received while the other always sends

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

SECURITY FABRIC - CONFIGURATION-SYNC (CSF) - What’s the default?

A

Default is to sync.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

SECURITY FABRIC - How do you disable syncronization

A

set configuration-sync local

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

SECURITY FABRIC - What configuration elements is synced in the fabric by default?

A

FortyAnalyzer logging Central Management Sandbox inspection FortiClient EMS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

TCP - SESSIONS - What is the status for NONE

A

CERO 0

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

TCP - SESSIONS - Status # 3,4,5

A

SYN &SYN/ACK FIN_WAIT TIME_WAIT

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

TCP - SESSIONS - What is the status for ESTABLISHED (EXCHANGING INFO)

A

ONE 1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

TCP - SESSIONS - What is the status for SYN_SENT

A

TWO 2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

TCP - SESSIONS -Status # 6 and 7?

A

CLOSE and CLOSE_WAIT

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

NGFW - MODE - POLICY - What are the minimum 2 policies that you must configure?

A

Security Policy and Inspection/authentication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly