Questions and Answers:104 Q&As
Updated: 2009-09-04
Exam Number/Code: 925-201b
Exam Name: Principles of Network Security and FortiGate Configurations
Fortinet Fortinet 925-201b 104Q&As are created by senior IT lecturers in Certinside certification Q&A network and Fortinet product experts combination PROMETRIC or VUE true-to-date environmental examination of the original title.
The Questions & Answers cover the latest real test and with all the correct answer.we promise the Q&A for Fortinet 925-201b(Principles of Network Security and FortiGate Configurations) examination of original title complete coverage.925-201b Questions & Answers help you pass the exam.
925-201b Free Demo Download
Certinside offers free demo for 925-201b 104 Q & As with Expert Explanations). You can check out the interface, question quality and usability of our practice exams before you decide to buy it.
Download 925-201b Exam Pdf Demo
Download 925-201b Exam iEngine Demo
Exam : Fortinet 925-201b
Title : 3Com Certified Enterprise LAN Pre-Sales Expert version 3.2
1. What is the valid method to fixup Fortigate interface speed&duplex?
A. via web GUI
B. via CLI
C. via auto update
D. via foritlog
Answer: B
2. Which one is the most efficient way to block MSN traffic by Fortigate unit ?
A. Use IPS module by applying protection profile
B. Use Antivirus engine
C. Use firewall policy
D. Use content filtering
Answer: A
3. 168.1.99/24; http, https, ping, ssh access is enabled
B. external: 192.168.100.99/24; ping is enabled
C. internal: 192.168.1.99/24;https,ping,ssh access is enable
D. external: 192.168.100.99/24;ping & http is enable
Answer: A , B
2. Which of the following firmware upgrade method will cause configuration reset?
A. WebUI
B. CLI
C. Fortimanager
D. interrupt booting procedure by CLI
Answer: D
4. What is the valid web script filtering option for web filtering ?
A. Java Applet
B. Worm
C. ActiveX
D. Cookie
Answer: A, C, D
5. Which of the following statement about TCP MTU for Fortigate is true?
A. default MTU is 1500 bytes
B. For manual and DHCP addressing mode the MTU size can be from 576 to 1500 bytes
C. for PPPOE addressing mode the MTU size can be from 576 to 1492 bytes
D. default MTU is 1492 bytes
Answer: A , B, C
6. What is the valid address object in Fortigate unit ?
A. 10.1.1.1 / 255.255.255.0
B. 10.1.1.1 / 255.255.255.255
C. 10.1.1.1 / 255.255.255.248
D. 10.1.1.1 / 255.255.255.252
Answer: B
7. What are the necessary procedure before using Xauth . ?
A. create user group
B. create firewall policy
C. enable IPSEC VPN
D. enable PPTP
Answer: A , B, C
8. what is the valid ipsec pahse 2 option
A. des
B. 3des
C. md5
D. sha1
Answer: C, D
9. 1.1.1 / 255.255.255.0
B. 10.1.1.1 / 255.255.255.255
C. 10.1.1.1 / 255.255.255.248
D. 10.1.1.1 / 255.255.255.252
Answer: B
10. What is the valid network in Fortigate
A. 10.1.1.0 / 255.255.255.0
B. 10.1.1.1 / 255.255.255.0
C. 10.1.1.0 / 255.255.255.255
D. 10.1.1.0 / 255.255.0.0
Answer: B, D
10. Which of the following default factory setting is true about Fortigate unit?
A. internal: 192.168.1.99/24; http, https, ping, ssh access is enabled
B. external: 192.168.100.99/24; ping is enabled
C. internal: 192.168.1.99/24;https,ping,ssh access is enable
D. external: 192.168.100.99/24;ping & http is enable
Answer: A , B
11. 1.99/24; http, https, ping, ssh access is enabled
B. external: 192.168.100.99/24; ping is enabled
C. internal: 192.168.1.99/24;https,ping,ssh access is enable
D. external: 192.168.100.99/24;ping & http is enable
Answer: A
12. What is the valid ipsec phase 1 option
A. des
B. 3des
C. md5
D. sha1
Answer: A , B
