An administrator has configured the following settings:
What does the configuration do? (Choose two.)
A. Reduces the amount of logs generated by denied traffic.
B. Enforces device detection on all interfaces for 30 minutes.
C. Blocks denied users for 30 minutes.
D. Creates a session for traffic being denied.
|
Download Printable PDF. VALID exam to help you PASS. |
 |
Check https://kb.fortinet.com/kb/documentLink.do?externalID=FD46328
So CD
Nope, A, D. I think that the default behavior for denied traffic is that the system does not generate a session for this type of traffic. With set ses-denied-traffic enable we can force to the system to create a session for denied traffic. Whith the second command (block-session-timer) It permits the system to continue blocking traffic without packet analisis and automatically deny the traffic.
As i say before,
D because the system creates a new session.
A because the system creates one log for a 30 seconds session.
https://kb.fortinet.com/kb/documentLink.do?externalID=FD46328
has to be AD Fortigate uses seconds and never minutes
AD
block-session-timer = Duration in sec. for blocked sessions
That’s another way of finding the answer…thinking outside the box 🙂
C,D