NSE4_FGT-7.2無料問題集「Fortinet NSE 4

質問 1

Refer to the exhibit.

Examine the intrusion prevention system (IPS) diagnostic command.
Which statement is correct If option 5 was used with the IPS diagnostic command and the outcome was a decrease in the CPU usage?

（A）The IPS engine was blocking all traffic.

（B）The IPS engine will continue to run in a normal state.

（C）The IPS engine was unable to prevent an intrusion attack .

（D）The IPS engine was inspecting high volume of traffic.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

What are two functions of the ZTNA rule? (Choose two.)

（A）It enforces access control.

（B）It redirects the client request to the access proxy.

（C）It defines the access proxy.

（D）It applies security profiles to protect traffic.

正解：A、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Which two statements describe how the RPF check is used? (Choose two.)

（A）The RPF check is run on the first sent and reply packet of any new session.

（B）The RPF check is run on the first sent packet of any new session.

（C）The RPF check is a mechanism that protects FortiGate and the network from IP spoofing attacks.

（D）The RPF check is run on the first reply packet of any new session.

正解：B、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

A network administrator is configuring a new IPsec VPN tunnel on FortiGate. The remote peer IP address is dynamic. In addition, the remote peer does not support a dynamic DNS update service.
What type of remote gateway should the administrator configure on FortiGate for the new IPsec VPN tunnel to work?

（A）Dialup User

（B）Dynamic DNS

（C）Pre-shared Key

（D）Static IP Address

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

If the Issuer and Subject values are the same in a digital certificate, which type of entity was the certificate issued to?

（A）A CRL

（B）A root CA

（C）A person

（D）A subordinate CA

正解：B 解答を投票する

質問 6

Refer to the exhibit.

Which contains a session list output. Based on the information shown in the exhibit, which statement is true?

（A）Destination NAT is disabled in the firewall policy.

（B）Port block allocation IP pool is used in the firewall policy.

（C）Overload NAT IP pool is used in the firewall policy.

（D）One-to-one NAT IP pool is used in the firewall policy.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

An administrator must disable RPF check to investigate an issue.
Which method is best suited to disable RPF without affecting features like antivirus and intrusion prevention system?

（A）Disable the RPF check at the FortiGate interface level for the reply check .

（B）Enable asymmetric routing, so the RPF check will be bypassed.

（C）Disable the RPF check at the FortiGate interface level for the source check.

（D）Enable asymmetric routing at the interface level.

正解：C 解答を投票する

質問 8

An administrator is configuring an IPsec VPN between site A and site B. The Remote Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192. 168. 1.0/24 and the remote quick mode selector is 192. 168.2.0/24.
Which subnet must the administrator configure for the local quick mode selector for site B?

（A）192. 168.2.0/24

（B）192. 168. 1.0/24

（C）192. 168.0.0/24

（D）192. 168.3.0/24

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

FortiGate is operating in NAT mode and is configured with two virtual LAN (VLAN) subinterfaces added to the same physical interface.
In this scenario, which statement about VLAN IDs is true?

（A）The two VLAN subinterfaces can have the same VLAN ID only if they belong to different VDOMs.

（B）The two VLAN subinterfaces must have different VLAN IDs.

（C）The two VLAN subinterfaces can have the same VLAN ID only if they have IP addresses in the same subnet.

（D）The two VLAN subinterfaces can have the same VLAN ID only if they have IP addresses in different subnets.

正解：C、D 解答を投票する

質問 10

What is the effect of enabling auto-negotiate on the phase 2 configuration of an IPsec tunnel?

（A）FortiGate automatically negotiates a new security association after the existing security association expires.

（B）FortiGate automatically negotiates different local and remote addresses with the remote peer.

（C）FortiGate automatically negotiates different encryption and authentication algorithms with the remote peer.

（D）FortiGate automatically brings up the IPsec tunnel and keeps it up, regardless of activity on the IPsec tunnel.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

NSE4_FGT-7.2 無料問題集「Fortinet NSE 4 - FortiOS 7.2」

弊社を連絡する

関連リンク

トップ試験