NSE4_FGT-7.0無料問題集「Fortinet NSE 4

質問 1

View the exhibit:

Which the FortiGate handle web proxy traffic rue? (Choose two.)

（A）Broadcast traffic received in port1-VLAN10 will not be forwarded to port2-VLAN10.

（B）Traffic between port1-VLAN1 and port2-VLAN1 is allowed by default.

（C）port1-VLAN10 and port2-VLAN10 can be assigned to different VDOMs.

（D）port-VLAN1 is the native VLAN for the port1 physical interface.

正解：A、C 解答を投票する

質問 2

A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes.
* All traffic must be routed through the primary tunnel when both tunnels are up
* The secondary tunnel must be used only if the primary tunnel goes down
* In addition, FortiGate should be able to detect a dead tunnel to speed up tunnel failover Which two key configuration changes are needed on FortiGate to meet the design requirements? (Choose two,)

（A）Configure a high distance on the static route for the primary tunnel, and a lower distance on the static route for the secondary tunnel.

（B）Enable Dead Peer Detection.

（C）Configure a lower distance on the static route for the primary tunnel, and a higher distance on the static route for the secondary tunnel.

（D）Enable Auto-negotiate and Autokey Keep Alive on the phase 2 configuration of both tunnels.

正解：B、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Which of the following statements is true regarding SSL VPN settings for an SSL VPN portal?

（A）By default, split tunneling is enabled.

（B）By default, FortiGate uses WINS servers to resolve names.

（C）By default, the admin GUI and SSL VPN portal use the same HTTPS port.

（D）By default, the SSL VPN portal requires the installation of a client's certificate.

正解：C 解答を投票する

質問 4

An administrator has configured two-factor authentication to strengthen SSL VPN access. Which additional best practice can an administrator implement?

（A）Configure split tunneling in tunnel mode.

（B）Configure different SSL VPN realms.

（C）Configure Source IP Pools.

（D）Configure host check.

正解：D 解答を投票する

質問 5

Which three authentication timeout types are availability for selection on FortiGate? (Choose three.)

正解：C、D、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Which certificate value can FortiGate use to determine the relationship between the issuer and the certificate?

（A）Subject Alternative Name value

（B）SMMIE Capabilities value

（C）Subject Key Identifier value

（D）Subject value

正解：C 解答を投票する

質問 7

When configuring a firewall virtual wire pair policy, which following statement is true?

（A）Any number of virtual wire pairs can be included, as long as the policy traffic direction is the same.

（B）Only a single virtual wire pair can be included in each policy.

（C）Any number of virtual wire pairs can be included in each policy, regardless of the policy traffic direction settings.

（D）Exactly two virtual wire pairs need to be included in each policy.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Which CLI command allows administrators to troubleshoot Layer 2 issues, such as an IP address conflict?

（A）get system performance status

（B）diagnose sys top

（C）get system status

（D）get system arp

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

Examine the following web filtering log.

Which statement about the log message is true?

（A）The usage quota for the IP address 10.0.1.10 has expired

（B）The action for the category Games is set to block.

（C）The web site miniclip.com matches a static URL filter whose action is set to Warning.

（D）The name of the applied web filter profile is default.

正解：D 解答を投票する

質問 10

Which three CLI commands can you use to troubleshoot Layer 3 issues if the issue is in neither the physical layer nor the link layer? (Choose three.)

正解：A、C、D 解答を投票する

NSE4_FGT-7.0 無料問題集「Fortinet NSE 4 - FortiOS 7.0」

弊社を連絡する

関連リンク

トップ試験