fortinet · NSE8_812 · Q428 · multiple_response · topic_1

Refer to the CLI output: //IMG// Given the information shown in the output, which two statements are correct? (Choose…

Refer to the CLI output: //IMG// Given the information shown in the output, which two statements are correct? (Choose two.)

A.Geographical IP policies are enabled and evaluated after local techniques
B.Attackers can be blocked before they target the servers behind the FortiWeb
C.The IP Reputation feature has been manually updated
D.An IP address that was previously used by an attacker will always be blocked
E.Reputation from blacklisted IP addresses from DHCP or PPPoE pools can be restored

Explanation

B and E. https://docs.fortinet.com/document/fortiweb/7.4.2/administration-guide/608374/ip-reputation-blocklisting-source-ips-with-poor-reputation Fortinet compiles a reputation for each public IP address. Clients will have poor reputations if they have been participating in attacks, willingly or otherwise. Because blacklisting innocent clients is equally undesirable, Fortinet also restores the reputations of clients that improve their behavior. This is crucial when an infected computer is cleaned, or in DHCP or PPPoE pools where an innocent client receives an IP address that was previously leased by an attacker.

Reference: examtopics_top_comment

Practice with progress tracking

Start tracked practice Pricing