How would you apply security to the network shown in the exhibit?
A.
Replace RW1 with a ruggedized FortiGate and RW2 with a normal FortiGate. Enable industrial category
on the application control. Place a FortiGate to secure Web servers. Configure IPsec to secure sensors
data. Place a ruggedized FortiAP to provide Wi-Fi to the sensors.
B.
Replace RW1 with a normal FortiGate and RW2 with a ruggedized FortiGate. Enable industrial category
on the application control. Place a FortiGate to secure Web servers. Configure IPsec to secure sensors
data. Place a FortiAP to provide Wi-Fi to the sensors.
C.
Replace RW1 with a normal FortiGate and RW2 with a ruggedized FortiGate. Enable industrial category
on the Web filter. Place a FortiWeb to secure Web servers. Configure IPsec to secure sensors data.
Place a ruggedized FortiAP to provide Wi-Fi to the sensors.
D.
Replace RW1 with a normal FortiGate and RW2 with a ruggedized FortiGate. Enable industrial category
on the application control. Place a FortiWeb to secure Web servers. Configure IPsec to secure sensors
data. Place a ruggedized FortiAP to provide Wi-Fi to the sensors.
Why not answer A? As site with SW1 has requirements for ruggedized firewall
0
0
I think D is correct, there is no industrial category in the webfilter, only in the application filter. If you place a ruggedized firewall, a ruggedized AP should also be placed in stead of the normal one.
0
0
Well answer A is partially wrong for telling you to use FortiGate to secure the web servers. It’s obvious that you should use FortiWeb instead for better protection. However, I am mystified by the notion you should use ruggedized at RW2 and not RW1. It should absolutely be the other way around. Badly written question!!
0
0
I’ve given this some thought and I’m going to reverse course and say A is the right answer. It’s the only one that says ruggedized for RW1 which is clearly the answer. And you *can* use FortiGate to protect web servers, although FortiWeb would be ideal. It’s the least wrong answer I suppose. I’m taking this test in a month and if presented the question that’s gonna be my pick.
0
0