NSE7_EFW-6.2無料問題集「Fortinet NSE 7

質問 1

Examine the output of the 'diagnose ips anomaly list' command shown in the exhibit; then answer the question below.

Which IP addresses are included in the output of this command?

（A）Those whose traffic was detected as an anomaly by an IPS sensor.

（B）Those whose traffic exceeded a threshold of a matching DoS policy.

（C）Those whose traffic matches an IPS sensor.

（D）Those whose traffic matches a DoS policy.

正解：D 解答を投票する

質問 2

View the exhibit, which contains the output of a real-time debug, and then answer the question below.

Which of the following statements is true regarding this output? (Choose two.)

（A）FortiGate found the requested URL in its local cache.

（B）The requested URL belongs to category ID 52.

（C）This web request was inspected using the root web filter profile.

（D）The web request was allowed by FortiGate.

正解：A、B 解答を投票する

質問 3

When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filter web requests when the client browser does not provide the server name indication (SNI) extension?

（A）FortiGate uses the CN information from the Subject field in the server certificate.

（B）FortiGate uses the requested URL from the user's web browser.

（C）FortiGate switches to the full SSL inspection method to decrypt the data.

（D）FortiGate blocks the request without any further inspection.

正解：A 解答を投票する

質問 4

View the exhibit, which contains a partial output of an IKE real-time debug, and then answer the question below.

Based on the debug output, which phase-1 setting is enabled in the configuration of this VPN?

（A）auto-discovery-forwarder

（B）auto-discovery-sender

（C）auto-discovery-shortcut

（D）auto-discovery-receiver

正解：A 解答を投票する

質問 5

View the exhibit, which contains the output of a diagnose command, and the answer the question below.

Which statements are true regarding the Weight value?

（A）It determines which FortiGuard server is used for license validation.

（B）Its initial value is statically set to 10.

（C）Its initial value is calculated based on the round trip delay (RTT).

（D）Its value is incremented with each packet lost.

正解：D 解答を投票する

質問 6

The CLI command set intelligent-mode <enable | disable> controls the IPS engine's adaptive scanning behavior. Which of the following statements describes IPS adaptive scanning?

（A）Downloads signatures on demand from FDS based on scanning requirements.

（B）Determines the optimal number of IPS engines required based on system load.

（C）Determines when it is secure enough to stop scanning session traffic.

（D）Choose a matching algorithm based on available memory and the type of inspection being performed.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

Examine the partial output from the IKE real time debug shown in the exhibit; then answer the question below.

Why didn't the tunnel come up?

（A）The remote gateway's Phase-1 configuration does not match the local gateway's phase-1 configuration.

（B）One IPsec gateway is using main mode, while the other IPsec gateway is using aggressive mode.

（C）IKE mode configuration is not enabled in the remote IPsec gateway.

（D）The remote gateway's Phase-2 configuration does not match the local gateway's phase-2 configuration.

正解：A 解答を投票する

質問 8

What events are recorded in the crashlogs of a FortiGate device? (Choose two.)

（A）Changes in the status of any of the FortiGuard licenses.

（B）Configuration changes.

（C）System entering to and leaving from the proxy conserve mode.

（D）A process crash.

正解：C、D 解答を投票する

NSE7_EFW-6.2 無料問題集「Fortinet NSE 7 - Enterprise Firewall 6.2」

弊社を連絡する

関連リンク

トップ試験