FCSS_EFW_AD-7.4無料問題集「Fortinet FCSS - Enterprise Firewall 7.4 Administrator」

質問 1

Refer to the exhibit, which shows a physical topology and a traffic log.

The administrator is checking on FortiAnalyzer traffic from the device with IP address 10.1.10.1, located behind the FortiGate ISFW device.
The firewall policy in on the ISFW device does not have UTM enabled and the administrator is surprised to see a log with the action Malware, as shown in the exhibit.
What are the two reasons FortiAnalyzer would display this log? (Choose two.)

（A）ISFW is not connected to FortiAnalyzer and must go through NGFW-1.

（B）Security rating is enabled in ISFW.

（C）The firewall policy in NGFW-1 has UTM enabled.

（D）ISFW is in a Security Fabric environment.

正解：C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

An administrator configured the following command on FortiGate.
config router ospf
set restart-mode graceful-restart
Which two statements correctly describe the result of the above command? (Choose two.)

（A）The OSPF neighbor that receives the grace link-state advertisement (LSA) will enter into helper mode.

（B）After the default 40 seconds wait time, the OSPF neighbors will resume communication with the restarting router.

（C）In an HA cluster, FortiGate devices will keep the OSPF routes in their routing table to avoid traffic interruption during an HA failover.

（D）FortiGate is configured with graceful restart, and will exit graceful mode, if the network topology changes.

正解：A、C 解答を投票する

質問 3

You want to know which content processor (CP) model FortiGate contains.
Which command should you enter?

（A）diagnose hardware deviceinfo

（B）get hardware status

（C）get hardware cp

（D）diagnose hardware lspci | grep 4e36

正解：B 解答を投票する

質問 4

An administrator is configuring two FortiGate devices in an HA cluster. While configuring the devices, the administrator issues the following commands on both HA cluster members:

In which two ways do these commands impact the HA cluster? (Choose two.)

（A）They force the switches to update their MAC forwarding tables, when failover happens.

（B）They force the former primary to shut down all its interfaces for one second when failover happens, excluding the heartbeat and reserved management interfaces.

（C）They force both HA devices for remote link monitoring to detect an issue in the forwarding path.

（D）They force the former primary to send gratuitous ARP packets when the failover happens to indicate that the virtual MAC address is now using a different device.

正解：A、B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Refer to the exhibits.
Network topology

Output from the command config system ha

A network diagram and the output from the command config system ha are shown.
The administrator has configured the cluster with the commands shown in the exhibit.
Why is the HA cluster not forming?

（A）The administrator must reconfigure the heartbeat interface.

（B）The administrator must reconfigure the cluster in active-active mode.

（C）The administrator must reconfigure the cluster in FGSP mode.

（D）The administrator must reconfigure the monitor interface.

正解：A 解答を投票する

質問 6

Refer to the exhibit, which shows an ADVPN network.

An administrator must configure an ADVPN using IBGP and EBGP to connect overlay network 1 with 2.
What two options must the administrator configure in BGP? (Choose two.)

（A）set ebgp-enforce-multrhop enable

（B）set attribute-unchanged next-hop

（C）set ibgp-enforce-multihop advpn

（D）set next-hop-self enable

正解：A、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

How would fec-ingress and fec-sgress IPsec configuration affect an IPsec tunnel?

（A）FortiGate will add additional redundant information to reconstruct any lost or erratically received packets.

（B）FortiGate will consider all IKEV2 packets as fragmentable.

（C）If fragmentation occurs, FortiGate will allow the packets at the IKE layer.

（D）When an FGSP member in FortiGate fails, FortiGate flushes the corresponding tunnels and sends out dead peer detection probes to find unavailable remote peers.

正解：A 解答を投票する

質問 8

Refer to the exhibit, which shows the packet capture output of a three-way handshake between FortiGate and FortiManager Cloud.

What two conclusions can you draw from the exhibit? (Choose two.)

（A）If the TLS handshake contains 17 cipher suites it means the TLS version must be 1.0 on this three- way handshake.

（B）FortiGate will receive a certificate that supports multiple domains because FortiManager operates in a cloud computing environment.

（C）FortiGate is connecting to the same IP server and will receive an independent certificate for its connection between FortiGate and FortiManager Cloud.

（D）The wildcard for the domain *.fortinet-ca2.support.fortinet.com must be supported by FortiManager Cloud.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

FCSS_EFW_AD-7.4 無料問題集「Fortinet FCSS - Enterprise Firewall 7.4 Administrator」

弊社を連絡する

関連リンク

トップ試験