NSE7無料問題集「Fortinet NSE7 Enterprise Firewall

質問 1

Examine the output of the 'get router info ospf interface' command shown in the exhibit; then answer the question below.

Which statements are true regarding the above output? (Choose two.)

（A）There are at least 5 OSPF routers connected to the port4 network.

（B）The local FortiGate has been elected as the OSPF backup designated router.

（C）The port4 interface is connected to the OSPF backbone area.

（D）Two OSPF routers are down in the port4 network.

正解：C、D 解答を投票する

質問 2

Examine the output from the 'diagnose vpn tunnel list' command shown in the exhibit; then answer the question below.

Which command can be used to sniffer the ESP traffic for the VPN DialUP_0?

（A）diagnose sniffer packet any 'port 500'

（B）diagnose sniffer packet any 'host 10.0.10.10'

（C）diagnose sniffer packet any 'esp'

（D）diagnose sniffer packet any 'port 4500'

正解：C 解答を投票する

質問 3

Examine the output of the 'diagnose ips anomaly list' command shown in the exhibit; then answer the question below.

Which IP addresses are included in the output of this command?

（A）Those whose traffic was detected as an anomaly by an IPS sensor.

（B）Those whose traffic exceeded a threshold of a matching DoS policy.

（C）Those whose traffic matches an IPS sensor.

（D）Those whose traffic matches a DoS policy.

正解：D 解答を投票する

質問 4

A FortiGate has two default routes:

All Internet traffic is currently using port1. The exhibit shows partial information for one sample session of Internet traffic from an internal user:

What would happen with the traffic matching the above session if the priority on the first default route (IDd1) were changed from 5 to 20?

（A）Session would be deleted, so the client would need to start a new session.

（B）Session would remain in the session table and its traffic would start using port2 as the outgoing interface.

（C）Session would remain in the session table and its traffic would keep using port1 as the outgoing interface.

（D）Session would remain in the session table and its traffic would be shared between port1 and port2.

正解：C 解答を投票する

質問 5

Examine the output of the 'diagnose debug rating' command shown in the exhibit; then answer the question below.

Which statement are true regarding the output in the exhibit? (Choose two.)

（A）FortiGate will send the FortiGuard queries to the server with highest weight.

（B）A server's round trip delay (RTT) is not used to calculate its weight.

（C）The TZ value represents the delta between each FortiGuard server's time zone and the FortiGate's time zone.

（D）There are three FortiGuard servers that are not responding to the queries sent by the FortiGate.

正解：A、C 解答を投票する

質問 6

A FortiGate device has the following LDAP configuration:

The LDAP user student cannot authenticate. The exhibit shows the output of the authentication real time debug while testing the student account:

Based on the above output, what FortiGate LDAP settings must the administer check? (Choose two.)

（A）dn.

（B）cnid.

（C）username.

（D）password.

正解：C、D 解答を投票する

質問 7

An administrator wants to capture ESP traffic between two FortiGates using the built-in sniffer. If the administrator knows that there is no NAT device located between both FortiGates, what command should the administrator execute?

（A）diagnose sniffer packet any 'udp port 500'

（B）diagnose sniffer packet any 'esp'

（C）diagnose sniffer packet any 'udp port 4500'

（D）diagnose sniffer packet any 'udp port 500 or udp port 4500'

正解：B 解答を投票する

質問 8

An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator noticed that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link-failed-signal to fix the problem. Which statement is correct regarding this command?

（A）Forces the former primary device to shut down all its non-heartbeat interfaces for one second while the failover occurs.

（B）Sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.

（C）Sends a link failed signal to all connected devices.

（D）Disables all the non-heartbeat interfaces in all the HA members for two seconds after a failover.

正解：A 解答を投票する

質問 9

Four FortiGate devices configured for OSPF connected to the same broadcast domain. The first unit is elected as the designated router The second unit is elected as the backup designated router Under normal operation, how many OSPF full adjacencies are formed to each of the other two units?

（A）3

（B）1

（C）4

（D）2

正解：D 解答を投票する

NSE7 無料問題集「Fortinet NSE7 Enterprise Firewall - FortiOS 5.4」

弊社を連絡する

関連リンク

トップ試験