NSE7_EFW-6.0無料問題集「Fortinet NSE 7

質問 1

A FortiGate is rebooting unexpectedly without any apparent reason. What troubleshooting tools could an administrator use to get more information about the problem? (Choose two.)

（A）Crashlogs.

（B）Policy monitor.

（C）Logs.

（D）Firewall monitor.

正解：A、C 解答を投票する

質問 2

What configuration changes can reduce the memory utilization in a FortiGate? (Choose two.)

（A）Increase the TCP session timers.

（B）Increase the FortiGuard cache time to live.

（C）Reduce the session time to live.

（D）Reduce the maximum file size to inspect.

正解：C、D 解答を投票する

質問 3

Examine the following traffic log; then answer the question below.
date-20xx-02-01 time=19:52:01 devname=master device_id="xxxxxxx" log_id=0100020007 type=event subtype=system pri critical vd=root service=kemel status=failure msg="NAT port is exhausted." What does the log mean?

（A）The limit for the maximum number of simultaneous sessions sharing the same NAT port has been reached.

（B）The limit for the maximum number of entries in the NAT port table has been reached.

（C）There is not enough available memory in the system to create a new entry in the NAT port table.

（D）FortiGate does not have any available NAT port for a new connection.

正解：A 解答を投票する

質問 4

What global configuration setting changes the behavior for content-inspected traffic while FortiGate is in system conserve mode?

（A）ips-failopen

（B）mem-failopen

（C）av-failopen

（D）utm-failopen

正解：C 解答を投票する

質問 5

View the following FortiGate configuration.

All traffic to the Internet currently egresses from port1. The exhibit shows partial session information for Internet traffic from a user on the internal network:

If the priority on route ID 1 were changed from 5 to 20, what would happen to traffic matching that user's session?

（A）The session would remain in the session table, but its traffic would now egress from both port1 and port2.

（B）The session would remain in the session table, and its traffic would still egress from port1.

（C）The session would be deleted, so the client would need to start a new session.

（D）The session would remain in the session table, and its traffic would start to egress from port2.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Which of the following tasks are automated using the Install Wizard on FortiManager? (Choose two.)

（A）Import interface mappings from managed devices.

（B）Install configuration changes to managed devices.

（C）Preview pending configuration changes for managed devices.

（D）Import policy packages from managed devices.

（E）Add devices to FortiManager.

正解：B、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

Which configuration can be used to reduce the number of BGP sessions in an IBGP network?

（A）Next-hop-self

（B）Route reflector

（C）Neighbor group

（D）Neighbor range

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Examine the output of the 'diagnose sys session list expectation' command shown in the exhibit; than answer the question below.

Which statement is true regarding the session in the exhibit?

（A）It is for traffic originated from the FortiGate.

（B）It is for management traffic terminating at the FortiGate.

（C）It was created by a session helper or ALG.

（D）It was created by the FortiGate kernel to allow push updates from FotiGuard.

正解：C 解答を投票する

質問 9

An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage. However, after the changes, one network application started to have problems. During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before the arrival of the SYN/ACKs. When the SYN/ACK packets arrive to the FortiGate, the unit has already deleted the respective sessions. Which TCP session timer must be increased to fix this problem?

（A）TCP half close.

（B）TCP session time to live.

（C）TCP half open.

（D）TCP time wait.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

Which of the following statements are correct regarding application layer test commands? (Choose two.)

（A）Some of them display statistics and configuration information about a feature or process.

（B）Some of them can be used to restart an application.

（C）They display real-time application debugs.

（D）They are used to filter real-time debugs.

正解：A、B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

NSE7_EFW-6.0 無料問題集「Fortinet NSE 7 - Enterprise Firewall 6.0」

弊社を連絡する

関連リンク

トップ試験