NSE7_EFW-7.0 無料問題集「Fortinet NSE 7 - Enterprise Firewall 7.0」

（A）port2

（B）Both port1 and port2

（C）port1

（D）port3

（A）New packets will be passed through without inspection if the IPS socket buffer runs out of memory.

（B）IPS will use the faster matching algorithm which is only available for units with more than 4 GB memory.

（C）IPS will scan every byte in every session.

（D）FortiGate will spawn IPS engine instances based on the system load.

（A）Traffic has been identified as coming from an application that is not allowed and the relevant replacement message needs to be displayed to the user, if configured.

（B）The existing session table entry has been updated with the app_id and the firewall policy table needs to be checked for a match.

（C）The URL category for this session has been updated by FortiGuard and the session needs to be checked against the policy again to ensure proper web filtering is applied.

（D）The application or URL category is unknown and needs to be rescanned by the IPS engine to try to identify the Layer 7 details.

（A）The Cached value is always the Active value plus the Inactive value

（B）Kernel indirectly accesses the low memory (LowTotal) through memory paging

（C）The unit is running a 32-bit FortiOS

（D）The unit is in kernel conserve mode

（A）When run on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate device.

（B）When run on the All FortiGate in ADOM, changes are automatically installed without the creation of a new revision history.

（C）When run on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate device.

（D）When run on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.

（A）FortiManager can download and maintain local copies of FortiGuard databases.

（B）FortiManager does not support rating requests.

（C）FortiManager supports only FortiGuard push to managed devices.

（D）FortiManager will respond to update requests only if they originate from a managed device.

（A）The npu_flag for this tunnel is 02.

（B）Different SPI values are a result of auto-negotiation being disabled for phase 2 selectors.

（C）Anti-replay is enabled.

（D）The npu_flag for this tunnel is 03.

（A）IP headers.

（B）IP payload.

（C）Ethernet headers.

（D）Port names.

（A）Some of them display real-time application debugs.

（B）Some of them display statistics and configuration information about a feature or process.

（C）Some of them can be used to restart an application.

（D）Some of them only display output, after you run the diagnose debug console enable command.

（A）Set preserve-session-route to enable.

（B）Set the priority of the static default route using port1 to 10. Most Voted

（C）Set snat-route-change to enable.

（D）Set the priority of the static default route using port2 to 1.