NSE7_EFW-6.4無料問題集「Fortinet NSE 7

質問 1

View the exhibit, which contains the output of a real-time debug, Which statement about this output is true?

Which of the following statements is true regarding this output?

（A）The requested URL belongs to category ID 255.

（B）FortiGate found the requested URL in its local cache.

（C）The server hostname Is training, fortinet.com.

（D）This web request was inspected using the ftgd-allow web filler profile.

正解：B 解答を投票する

質問 2

Which the following events can trigger the election of a new primary unit in a HA cluster? (Choose two.)

（A）One of the monitored interfaces in the primary unit is disconnected.

（B）The FortiGuard license for the primary unit is updated.

（C）Primary unit stops sending HA heartbeat keepalives.

（D）A secondary unit is removed from the HA cluster.

正解：A、C 解答を投票する

質問 3

View the exhibit, which contains the output of diagnose sys session stat, and then answer the question below.

Which statements are correct regarding the output shown? (Choose two.)

（A）All the sessions in the session table are TCP sessions.

（B）There are 166 TCP sessions waiting to complete the three-way handshake.

（C）There are 0 ephemeral sessions.

（D）No sessions have been deleted because of memory pages exhaustion.

正解：C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Examine the output of the 'get router info ospf interface' command shown in the exhibit; then answer the question below.

Which statements are true regarding the above output? (Choose two.)

（A）There are at least 5 OSPF routers connected to the port4 network.

（B）The local FortiGate has been elected as the OSPF backup designated router.

（C）The port4 interface is connected to the OSPF backbone area.

（D）Two OSPF routers are down in the port4 network.

正解：A、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Examine the output from the BGP real time debug shown in the exhibit, then the answer the question below:

Which statements are true regarding the output in the exhibit? (Choose two.)

（A）The state of the remote BGP peer is OpenConfirm.

（B）The state of the remote BGP peer will go to Connect after it confirms the received prefixes.

（C）Local BGP peer received a prefix for a default route.

（D）BGP peers have successfully interchanged Open and Keepalive messages.

正解：C、D 解答を投票する

質問 6

An administrator has configured the following CLI script on FortiManager, which failed to apply any changes to the managed device after being executed.

Why didn't the script make any changes to the managed device?

（A）Commands that start with the # sign are not executed.

（B）CLI scripts will add objects only if they are referenced by policies.

（C）Static routes can only be added using TCL scripts.

（D）Incomplete commands are ignored in CLI scripts.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

View the global IPS configuration, and then answer the question below.

Which of the following statements is true regarding this configuration?

（A）New packets will be passed through without inspection if the IPS socket buffer runs out of memory.

（B）IPS will use the faster matching algorithm which is only available for units with more than 4 GB memory.

（C）IPS will scan every byte in every session.

（D）FortiGate will spawn IPS engine instances based on the system load.

正解：C 解答を投票する

質問 8

A corporate network allows Internet Access to FSSO users only. The FSSO user student does not have Internet access after successfully logged into the Windows AD network. The output of the 'diagnose debug authd fsso list' command does not show student as an active FSSO user. Other FSSO users can access the Internet without problems. What should the administrator check? (Choose two.)

（A）The student workstation's IP subnet must be listed in the CA's trusted list.

（B）At least one of the student's user groups must be allowed by a FortiGate firewall policy.

（C）The user student must not be listed in the CA's ignore user list.

（D）The user student must belong to one or more of the monitored user groups.

正解：B、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

A FortiGate is rebooting unexpectedly without any apparent reason. What troubleshooting tools could an administrator use to get more information about the problem? (Choose two.)

（A）Crashlogs.

（B）Policy monitor.

（C）Logs.

（D）Firewall monitor.

正解：A、C 解答を投票する

質問 10

View the exhibit, which contains a partial output of an IKE real-time debug, and then answer the question below.

Based on the debug output, which phase-1 setting is enabled in the configuration of this VPN?

（A）auto-discovery-forwarder

（B）auto-discovery-sender

（C）auto-discovery-shortcut

（D）auto-discovery-receiver

正解：A 解答を投票する

NSE7_EFW-6.4 無料問題集「Fortinet NSE 7 - Enterprise Firewall 6.4」

弊社を連絡する

関連リンク

トップ試験