NSE7_EFW-6.4無料問題集「Fortinet NSE 7

質問 1

Which two statements about OCVPN are true? (Choose two.)

（A）OCVPN offers only Hub-Spoke VPNs.

（B）OCVPN supports static and dynamic IPs in WAN interface.

（C）Only root vdom supports OCVPN.

（D）FortiGate devices under different FortiCare accounts can be used to form OCVPN.

正解：B、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

Which two conditions must be met for a statistic route to be active in the routing table? (Choose two.)

（A）The outgoing interface is up.

（B）The link health monitor (if configured) is up.

（C）There is no other route, to the same destination, with a higher distance.

（D）The next-hop IP address is up.

正解：A、B 解答を投票する

質問 3

View the exhibit, which contains the output of a web diagnose command, and then answer the question below.

Which one of the following statements explains why the cache statistics are all zeros?

（A）FortiGate is using a flow-based web filter and the cache applies only to proxy-based inspection.

（B）There are no users making web requests.

（C）The FortiGuard web filter cache is disabled in the FortiGate's configuration.

（D）The administrator has reallocated the cache memory to a separate process.

正解：C 解答を投票する

質問 4

Which statement about the designated router (DR) and backup designated router (BDR) in an OSPF multi-access network is true?

（A）Non-DR and non-BDR routers will form full adjacencies to DR and BDR only.

（B）Only the DR receives link state information from non-DR routers.

（C）BDR is responsible for forwarding link state information from one router to another.

（D）FortiGate first checks the OSPF ID to elect a DR.

正解：A 解答を投票する

質問 5

Which real time debug should an administrator enable to troubleshoot RADIUS authentication problems?

（A）Diagnose authd console -log enable.

（B）Diagnose debug application fnbamd -1.

（C）Diagnose radius console -log enable.

（D）Diagnose debug application radius -1.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filter web requests when the client browser does not provide the server name indication (SNI) extension?

（A）FortiGate uses the CN information from the Subject field in the server certificate.

（B）FortiGate uses the requested URL from the user's web browser.

（C）FortiGate switches to the full SSL inspection method to decrypt the data.

（D）FortiGate blocks the request without any further inspection.

正解：A 解答を投票する

質問 7

A corporate network allows Internet Access to FSSO users only. The FSSO user student does not have Internet access after successfully logged into the Windows AD network. The output of the 'diagnose debug authd fsso list' command does not show student as an active FSSO user. Other FSSO users can access the Internet without problems. What should the administrator check? (Choose two.)

（A）The student workstation's IP subnet must be listed in the CA's trusted list.

（B）At least one of the student's user groups must be allowed by a FortiGate firewall policy.

（C）The user student must not be listed in the CA's ignore user list.

（D）The user student must belong to one or more of the monitored user groups.

正解：B、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

View the exhibit, which contains the output of a diagnose command, and the answer the question below.

Which statements are true regarding the Weight value?

（A）It determines which FortiGuard server is used for license validation.

（B）Its initial value is statically set to 10.

（C）Its initial value is calculated based on the round trip delay (RTT).

（D）Its value is incremented with each packet lost.

正解：D 解答を投票する

質問 9

Examine the output of the 'diagnose debug rating' command shown in the exhibit; then answer the question below.

Which statement are true regarding the output in the exhibit? (Choose two.)

（A）FortiGate will send the FortiGuard queries to the server with highest weight.

（B）A server's round trip delay (RTT) is not used to calculate its weight.

（C）The TZ value represents the delta between each FortiGuard server's time zone and the FortiGate's time zone.

（D）There are three FortiGuard servers that are not responding to the queries sent by the FortiGate.

正解：A、C 解答を投票する

質問 10

Which two statements about an auxiliary session are true? (Choose two.)

（A）With the auxiliary session setting disabled, for each traffic path, FortiGate will use the same auxiliary session.

（B）With the auxiliary session setting enabled, ECMP traffic is accelerated to the NP6 processor.

（C）With the auxiliary session disabled, only auxiliary sessions will be offloaded.

（D）With the auxiliary session setting enabled, two sessions will be created in case of routing change.

正解：A、C 解答を投票する

NSE7_EFW-6.4 無料問題集「Fortinet NSE 7 - Enterprise Firewall 6.4」

弊社を連絡する

関連リンク

トップ試験