Free SAP C-HRHFC-2311 Exam Dumps Questions & Answers


Exam Code/Number:	C-HRHFC-2311Join the discussion
Exam Name:	Fortinet NSE 4 - FortiOS 7.2
Certification:	SAP
Free Question Number:	184
Publish Date:	Sep 02, 2026
# of views:	1617
Rating 100%

Page: 1 / 37
Total 184 questions

Question 1

How can you disable RPF checking?

A.Disable strict-src-check under system settings.
B.Unset fail-alert-interfaces on the interface level settings.
C.Disable fail-detect on the interface level settings.
D.Disable src-check on the interface level settings

Question 2

Which three authentication timeout types are availability for selection on FortiGate? (Choose three.)

A.Idle-timeout
B.soft-timeout
C.hard-timeout
D.auth-on-demand
E.new-session

Question 3

Examine this output from a debug flow:

Why did the FortiGate drop the packet?

A.The next-hop IP address is unreachable.
B.It matched an explicitly configured firewall policy with the action DENY.
C.It failed the RPF check .
D.It matched the default implicit firewall policy.

Question 4

Refer to the exhibit.
A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.

Based on the phase 2 configuration shown in the exhibit, which configuration change will bring phase 2 up?

A.On HQ-FortiGate, set Encryption to AES256.
B.On HQ-FortiGate, enable Auto-negotiate.
C.On Remote-FortiGate, set Seconds to 43200.
D.On HQ-FortiGate, enable Diffie-Hellman Group 2.

Question 5

Which two statements are true about the RPF check? (Choose two.)

A.The RPF check is run on the first sent packet of any new session.
B.The RPF check is run on the first reply packet of any new session.
C.The RPF check is run on the first sent and reply packet of any new session.
D.RPF is a mechanism that protects FortiGate and your network from IP spoofing attacks.