Get Latest Aug-2024 Real C_HRHFC_2311 Exam Questions and Answers FREE [Q43-Q67]

4/5 - (1 vote)

Get Latest Aug-2024 Real C_HRHFC_2311 Exam Questions and Answers FREE

Truly Beneficial For Your SAP Exam (Updated 184 Questions)

SAP C_HRHFC_2311 Exam Syllabus Topics:

Topic	Details
Topic 1	SAP SuccessFactors Employee Central OData API Employee Master Data Replication from SAP SuccessFactors Employee Central to SAP ERP
Topic 2	Extensibility (BadIs) for SAP ERP Employee Data Replication with SAP SuccessFactors Employee Central SAP SuccessFactors Employee Central Integration Overview and Basic Settings
Topic 3	SAP SuccessFactors Compound Employee API SAP ERP User Interface Integration with SAP SuccessFactors Employee Central
Topic 4	SAP SuccessFactors Employee Central Integration with SAP ERP Scenarios Overview SAP ERP Employee Data Migration and Replication with SAP SuccessFactors Employee Central
Topic 5	Implement and configure the integration of Cost Centers from SAP SuccessFactors and SAP ERP HCM Introduce the Employee Central based integration scenarios
Topic 6	Implement and configure the extensibility of SAP ERP employee data to SAP SuccessFactors Implement and configure the replication of Employee Central data from SAP SuccessFactors and SAP ERP HCM
Topic 7	Configure settings you make in Customizing to prepare SAP ERP HCM system Determine when to use the appropriate API

NO.43 Refer to the exhibit.

In the network shown in the exhibit, the web client cannot connect to the HTTP web server. The administrator runs the FortiGate built-in sniffer and gets the output as shown in the exhibit.
What should the administrator do next to troubleshoot the problem?

Run a sniffer on the web server.

Capture the traffic using an external sniffer connected to port1.

Execute another sniffer in the FortiGate, this time with the filter host 10.0.1.10€

Execute a debug flow.

NO.44 Which statement correctly describes the use of reliable logging on FortiGate?

Reliable logging is enabled by default in all configuration scenarios.

Reliable logging is required to encrypt the transmission of logs.

Reliable logging can be configured only using the CLI.

Reliable logging prevents the loss of logs when the local disk is full.

NO.45 Which CLI command will display sessions both from client to the proxy and from the proxy to the servers?

diagnose wad session list

diagnose wad session list | grep hook-pre&&hook-out

diagnose wad session list | grep hook=pre&&hook=out

diagnose wad session list | grep “hook=pre”&”hook=out”

NO.46 Refer to the exhibit.

The global settings on a FortiGate device must be changed to align with company security policies. What does the Administrator account need to access the FortiGate global settings?

Change password

Enable restrict access to trusted hosts

Change Administrator profile

Enable two-factor authentication

NO.47 Refer to the exhibits.

The SSL VPN connection fails when a user attempts to connect to it. What should the user do to successfully connect to SSL VPN?

Change the SSL VPN port on the client.

Change the Server IP address.

Change the idle-timeout.

Change the SSL VPN portal to the tunnel.

NO.48 Refer to the exhibit.
A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.

Based on the phase 2 configuration shown in the exhibit, which configuration change will bring phase 2 up?

On Remote-FortiGate, set Seconds to 43200.

On HQ-FortiGate, set Encryption to AES256.

On HQ-FortiGate, enable Diffie-Hellman Group 2.

On HQ-FortiGate, enable Auto-negotiate.

NO.49 Examine this PAC file configuration.
Which of the following statements are true? (Choose two.)

Browsers can be configured to retrieve this PAC file from the FortiGate.

Any web request to the 172.25. 120.0/24 subnet is allowed to bypass the proxy.

All requests not made to Fortinet.com or the 172.25. 120.0/24 subnet, have to go through altproxy.corp.com: 8060.

Any web request fortinet.com is allowed to bypass the proxy.

NO.50 Refer to the exhibit.

Examine the intrusion prevention system (IPS) diagnostic command.
Which statement is correct If option 5 was used with the IPS diagnostic command and the outcome was a decrease in the CPU usage?

The IPS engine was inspecting high volume of traffic.

The IPS engine was unable to prevent an intrusion attack .

The IPS engine was blocking all traffic.

The IPS engine will continue to run in a normal state.

NO.51 The IPS engine is used by which three security features? (Choose three.)

Antivirus in flow-based inspection

Web filter in flow-based inspection

Application control

DNS filter

Web application firewall

NO.52 An administrator has configured the following settings:

What are the two results of this configuration? (Choose two.)

Device detection on all interfaces is enforced for 30 minutes.

Denied users are blocked for 30 minutes.

A session for denied traffic is created.

The number of logs generated by denied traffic is reduced.

NO.53 The HTTP inspection process in web filtering follows a specific order when multiple features are enabled in the web filter profile. What order must FortiGate use when the web filter profile has features enabled, such as safe search?

DNS-based web filter and proxy-based web filter

Static URL filter, FortiGuard category filter, and advanced filters

Static domain filter, SSL inspection filter, and external connectors filters

FortiGuard category filter and rating filter

NO.54 Which of the following statements about central NAT are true? (Choose two.)

IP tool references must be removed from existing firewall policies before enabling central NAT .

Central NAT can be enabled or disabled from the CLI only.

Source NAT, using central NAT, requires at least one central SNAT policy.

Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall.

NO.55 Examine this FortiGate configuration:

How does the FortiGate handle web proxy traffic coming from the IP address 10.2.1.200 that requires authorization?

It always authorizes the traffic without requiring authentication.

It drops the traffic.

It authenticates the traffic using the authentication scheme SCHEME2.

It authenticates the traffic using the authentication scheme SCHEME1.

NO.56 Which two statements explain antivirus scanning modes? (Choose two.)

In proxy-based inspection mode, files bigger than the buffer size are scanned.

In flow-based inspection mode, FortiGate buffers the file, but also simultaneously transmits it to the client.

In proxy-based inspection mode, antivirus scanning buffers the whole file for scanning, before sending it to the client.

In flow-based inspection mode, files bigger than the buffer size are scanned.

NO.57 Which two statements are correct regarding FortiGate HA cluster virtual IP addresses? (Choose two.)

Heartbeat interfaces have virtual IP addresses that are manually assigned.

A change in the virtual IP address happens when a FortiGate device joins or leaves the cluster.

Virtual IP addresses are used to distinguish between cluster members.

The primary device in the cluster is always assigned IP address 169.254.0.1.

NO.58 An administrator needs to configure VPN user access for multiple sites using the same soft FortiToken. Each site has a FortiGate VPN gateway. What must an administrator do to achieve this objective?

The administrator can register the same FortiToken on more than one FortiGate.

The administrator must use a FortiAuthenticator device

The administrator can use a third-party radius OTP server.

The administrator must use the user self-registration server.

NO.59 Which statement is correct regarding the security fabric?

FortiManager is one of the required member devices.

FortiGate devices must be operating in NAT mode.

A minimum of two Fortinet devices is required.

FortiGate Cloud cannot be used for logging purposes.

NO.60 Refer to the exhibit.

An administrator has configured a performance SLA on FortiGate, which failed to generate any traffic.
Why is FortiGate not sending probes to 4.2.2.2 and 4.2.2.1 servers? (Choose two.)

The Detection Mode setting is not set to Passive.

Administrator didn’t configure a gateway for the SD-WAN members, or configured gateway is not valid.

The configured participants are not SD-WAN members.

The Enable probe packets setting is not enabled.

NO.61 Which two statements are correct about a software switch on FortiGate? (Choose two.)

It can be configured only when FortiGate is operating in NAT mode

Can act as a Layer 2 switch as well as a Layer 3 router

All interfaces in the software switch share the same IP address

It can group only physical interfaces

NO.62 Which scanning technique on FortiGate can be enabled only on the CLI?

Heuristics scan

Trojan scan

Antivirus scan

Ransomware scan

NO.63 When a firewall policy is created, which attribute is added to the policy to support recording logs to a FortiAnalyzer or a FortiManager and improves functionality when a FortiGate is integrated with these devices?

Log ID

Universally Unique Identifier

Policy ID

Sequence ID

NO.64 What is the primary FortiGate election process when the HA override setting is disabled?

Connected monitored ports > Priority > HA uptime > FortiGate serial number

Connected monitored ports > Priority > System uptime > FortiGate serial number

Connected monitored ports > HA uptime > Priority > FortiGate serial number

Connected monitored ports > System uptime > Priority > FortiGate serial number

NO.65 Refer to the exhibit.
Refer to the FortiGuard connection debug output.

Based on the output shown in the exhibit, which two statements are correct? (Choose two.)

A local FortiManager is one of the servers FortiGate communicates with.

One server was contacted to retrieve the contract information.

There is at least one server that lost packets consecutively.

FortiGate is using default FortiGuard communication settings.

NO.66 Refer to the exhibits.
The exhibits show a network diagram and firewall configurations.
An administrator created a Deny policy with default settings to deny Webserver access for Remote-User2. Remote-User1 must be able to access the Webserver. Remote-User2 must not be able to access the Webserver.

In this scenario, which two changes can the administrator make to deny Webserver access for Remote-User2? (Choose two.)

Disable match-vip in the Deny policy.

Set the Destination address as Deny_IP in the Allow-access policy.

Enable match vip in the Deny policy.

Set the Destination address as Web_server in the Deny policy.

NO.67 Refer to the exhibit.

The exhibit contains a network diagram, central SNAT policy, and IP pool configuration.
The WAN (port1) interface has the IP address 10.200. 1. 1/24.
The LAN (port3) interface has the IP address 10.0. 1.254/24.
A firewall policy is configured to allow to destinations from LAN (port3) to WAN (port1).
Central NAT is enabled, so NAT settings from matching Central SNAT policies will be applied.
Which IP address will be used to source NAT the traffic, if the user on Local-Client (10.0. 1. 10) pings the IP address of Remote-FortiGate (10.200.3. 1)?