NSE7_EFW-6.4無料問題集「Fortinet NSE 7

質問 1

View the central management configuration shown in the exhibit, and then answer the question below.

Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?

（A）10.0.1.242

（B）One of the public FortiGuard distribution servers

（C）10.0.1.244

（D）10.0.1.240

正解：B 解答を投票する

質問 2

What is the diagnose test application ipsmonitor 99 command used for?

（A）To enable IPS bypass mode

（B）To restart all IPS engines and monitors

（C）To disable the IPS engine

（D）To provide information regarding IPS sessions

正解：B 解答を投票する

質問 3

Refer to the exhibit, which contains the debug output of diagnose dvm device list.

Which two statements about the output shown in the exhibit are correct? (Choose two.)

（A）The FortiGate configuration is in sync with latest running revision history.

（B）The policy package has been modified for Local-FortiGate.

（C）There are pending device-level changes yet to be installed on Local-FortiGate.

（D）ADOMs are disabled on the FortiManager

正解：A、C 解答を投票する

質問 4

An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator noticed that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link-failed-signal to fix the problem. Which statement is correct regarding this command?

（A）Forces the former primary device to shut down all its non-heartbeat interfaces for one second while the failover occurs.

（B）Sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.

（C）Sends a link failed signal to all connected devices.

（D）Disables all the non-heartbeat interfaces in all the HA members for two seconds after a failover.

正解：A 解答を投票する

質問 5

View the exhibit, which contains a screenshot of some phase-1 settings, and then answer the question below.

The VPN is up, and DPD packets are being exchanged between both IPsec gateways; however, traffic cannot pass through the tunnel. To diagnose, the administrator enters these CLI commands:

However, the IKE real time debug does not show any output. Why?

（A）The debug output shows phase 1 negotiation only. After that, the administrator must enable the following real time debug: diagnose debug application ipsec -1.

（B）The debug output shows phases 1 and 2 negotiations only. Once the tunnel is up, it does not show any more output.

（C）The log-filter setting was set incorrectly. The VPN's traffic does not match this filter.

（D）The debug shows only error messages. If there is no output, then the tunnel is operating normally.

正解：C 解答を投票する

質問 6

View the exhibit, which contains a partial output of an IKE real-time debug, and then answer the question below.

Based on the debug output, which phase-1 setting is enabled in the configuration of this VPN?

（A）auto-discovery-forwarder

（B）auto-discovery-sender

（C）auto-discovery-shortcut

（D）auto-discovery-receiver

正解：A 解答を投票する

質問 7

Which two statements about bulk configuration changes made using FortiManager CLI scripts are correct? (Choose two.)

（A）When run on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate device.

（B）When run on the All FortiGate in ADOM, changes are automatically installed without the creation of a new revision history.

（C）When run on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate device.

（D）When run on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.

正解：A、D 解答を投票する

質問 8

View the exhibit, which contains the output of a diagnose command, and then answer the question below.

What statements are correct regarding the output? (Choose two.)

（A）This is an expected session created by an application control profile.

（B）This is an expected session created by a session helper.

（C）Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next-hop IP address 10.200.1.1.

（D）Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next-hop IP address 10.0.1.10.

正解：B、C 解答を投票する

質問 9

View the exhibit, which contains the output of a diagnose command, and then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

（A）Servers with the D flag are considered to be down.

（B）FortiGate will probe 121.111.236.179 every fifteen minutes for a response.

（C）Servers with a negative TZ value are experiencing a service outage.

（D）FortiGate used 209.222.147.3 as the initial server to validate its contract.

正解：B、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

Refer to the exhibit, which contains the partial output of a diagnose command.

Based on the output, which two statements are correct? (Choose two.)

（A）Quick mode selectors are disabled.

（B）The remote gateway IP is 10.200.4.1.

（C）Anti-replay is enabled

（D）DPD is disabled.

正解：B、C 解答を投票する

NSE7_EFW-6.4 無料問題集「Fortinet NSE 7 - Enterprise Firewall 6.4」

弊社を連絡する

関連リンク

トップ試験