NSE4_FGT-7.0無料問題集「Fortinet NSE 4

質問 1

An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

（A）The operation mode is transparent.

（B）The interface has been configured for one-arm sniffer.

（C）Captive portal is enabled in the interface.

（D）The interface is a member of a zone.

（E）The interface is a member of a virtual wire pair.

正解：A、B、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

An administrator must disable RPF check to investigate an issue.
Which method is best suited to disable RPF without affecting features like antivirus and intrusion prevention system?

（A）Enable asymmetric routing, so the RPF check will be bypassed.

（B）Disable the RPF check at the FortiGate interface level for the source check.

（C）Disable the RPF check at the FortiGate interface level for the reply check.

（D）Enable asymmetric routing at the interface level.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Which two statements about IPsec authentication on FortiGate are correct? (Choose two.)

（A）Enabling XAuth results in a faster authentication because fewer packets are exchanged.

（B）For a stronger authentication, you can also enable extended authentication (XAuth) to request the remote peer to provide a username and password

（C）FortiGate supports pre-shared key and signature as authentication methods.

（D）A certificate is not required on the remote peer when you set the signature as the authentication method.

正解：B、C 解答を投票する

質問 4

Which two statements about antivirus scanning mode are true? (Choose two.)

（A）In flow-based inspection mode, FortiGate buffers the file, but also simultaneously transmits it to the client.

（B）In proxy-based inspection mode, antivirus scanning buffers the whole file for scanning, before sending it to the client.

（C）In flow-based inspection mode, files bigger than the buffer size are scanned.

（D）In proxy-based inspection mode, files bigger than the buffer size are scanned.

正解：A、B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Which three statements about security associations (SA) in IPsec are correct? (Choose three.)

（A）Phase 2 SA expiration can be time-based, volume-based, or both.

（B）Phase 2 SAs are used for encrypting and decrypting the data exchanged through the tunnel.

（C）Both the phase 1 SA and phase 2 SA are bidirectional.

（D）A phase 1 SA is bidirectional, while a phase 2 SA is directional.

（E）An SA never expires.

正解：A、B、D 解答を投票する

質問 6

A team manager has decided that, while some members of the team need access to a particular website, the majority of the team does not.
Which two configuration changes are the most effective way to support this requirement? (Choose two.)

（A）Implement a firewall policy with authentication for the specified users.

（B）Implement web category authentication for the specified website using a web filter profile.

（C）Implement web filter quotas for the specified website.

（D）Implement a DNS filter for the specified website.

正解：A、B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

In consolidated firewall policies, IPv4 and IPv6 policies are combined in a single consolidated policy. Instead of separate policies. Which three statements are true about consolidated IPv4 and IPv6 policy configuration? (Choose three.)

（A）The policy table in the GUI will be consolidated to display policies with IPv4 and IPv6 sources and destinations.

（B）The IP version of the sources and destinations in a policy must match.

（C）The policy table in the GUI can be filtered to display policies with IPv4, IPv6 or IPv4 and IPv6 sources and destinations.

（D）The IP version of the sources and destinations in a firewall policy must be different.

（E）The Incoming Interface. Outgoing Interface. Schedule, and Service fields can be shared with both IPv4 and IPv6.

正解：A、B、E 解答を投票する

質問 8

What devices form the core of the security fabric?

（A）Two FortiGate devices and one FortiAnalyzer device

（B）Two FortiGate devices and one FortiManager device

（C）One FortiGate device and one FortiAnalyzer device

（D）One FortiGate device and one FortiManager device

正解：A 解答を投票する

質問 9

Which certificate value can FortiGate use to determine the relationship between the issuer and the certificate?

（A）Subject Alternative Name value

（B）SMMIE Capabilities value

（C）Subject Key Identifier value

（D）Subject value

正解：C 解答を投票する

質問 10

An administrator has configured a strict RPF check on FortiGate. Which statement is true about the strict RPF check?

（A）Strict RPF checks the best route back to the source using the incoming interface.

（B）Strict RPF checks only for the existence of at cast one active route back to the source using the incoming interface.

（C）The strict RPF check is run on the first sent and reply packet of any new session.

（D）Strict RPF allows packets back to sources with all active routes.

正解：A 解答を投票する

NSE4_FGT-7.0 無料問題集「Fortinet NSE 4 - FortiOS 7.0」

弊社を連絡する

関連リンク

トップ試験