Intrusion Prevention System - Course-Era Answers

at

 Intrusion Prevention System - Course-Era Fortinet Fortimanager answers

 

 

Which two types of traffic can be offloaded for acceleration to content processors (CP)? (Choose two.)

IPv6 traffic

SSL VPN traffic

Intrusion prevention system (IPS)-inspected traffic

Session helper traffic

 

 

 

Which custom intrusion prevention system (IPS) signature blocks only FTP passive mode requests?

F-SBID (--attack_id 1002; --name "Block.FTP; --protocol ftp; --flow from_client; -pattern “PASV”; --no_case;)

F-SBID (--attack_id 1002; --name "Block.FTP "; --protocol tcp; --service ftp; --flow from_client; --pattern "PASV"; --no_case;)

F-SBID (--attack_id 1002; --name "Block.PASV.FTP "; --protocol tcp; --dst_port 20; --flow from_client; --pattern "PASV"; --no_case;)

F-SBID (--attack_id 1002; --name "Block.PASV.FTP "; --protocol tcp; --flow from_client; --pattern "PASV"; --no_case;)

 

 

config ips global

set nps-accel-mod basic

end

Which two types of traffic will be offloaded to the network processor (NP)? (Choose two.)

 

IPsec phase 2 and hashing

Pre-intrusion prevention system (IPS) anomaly filtering

SSL encryption and decryption

Antivirus

 

 

When creating custom intrusion prevention system (IPS) signatures, which two options are required? (Choose two.)

 

 

--name

--protocol

--severity

–service

 

 

Which two scenarios can you block using FortiGuard intrusion prevention system (IPS) signatures? (Choose two.)

 

 

Traffic with protocol anomalies

Propagation of zero-day malware

Traffic exploiting known vulnerabilities

Traffic from invalid URLs

 


Featured Post

Day 41 — BGP Confederations: Sub-AS Design, External View and Migration

1. Opening Confederations are another way to scale BGP inside a large administrative domain. They divide the domain into member autonomous systems while presenting a single confederation identifier to external peers. They are powerful, but their operational model is more complex than simply 'using private ASNs inside.' The engineering goal is not to memorize another BGP command. It is to understand what information each speaker is allowed to propagate, what path information can be hidden, and what failure domain is created by the chosen control-plane architecture . 2. Concept and standards behavior RFC 5065 defines AS_CONFED_SEQUENCE and AS_CONFED_SET and how member-AS relationships are represented. Confederation external sessions have eBGP-like properties inside the confederation, while the confederation is presented externally as one AS. Modern guidance must also account for the fact that RFC 9774 prohibits new origination of AS_SET/AS_CONFED_SET in ordinary aggregation c...