NSE7_EFW-7.2無料問題集「Fortinet NSE 7

質問 1

How are bulk configuration changes made using FortiManager CLI scripts? (Choose two.)

（A）When run on the Device Database, changes are applied directly to the managed FortiGate device.

（B）When run on the All FortiGate in ADOM, changes are automatically installed without the creation of a new revision history.

（C）When run on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.

（D）When run on the Policy Package, ADOM database, you must use the installation wizard to apply the changes to the managed FortiGate device.

正解：C、D 解答を投票する

質問 2

Exhibit.

Refer to the exhibit, which contains a partial policy configuration.
Which setting must you configure to allow SSH?

（A）Specify SSH in the Service field

（B）Include SSH in the Application field

（C）Select an application control profile corresponding to SSH in the Security Profiles section

（D）Configure pot 22 in the Protocol Options field.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Refer to the exhibit, which shows the output of a BGP summary.

What two conclusions can you draw from this BGP summary? (Choose two.)

（A）The router 100. 64. 3. 1 has the parameter bfd set to enable.

（B）The neighbors displayed are linked to a local router with the neighbor-range set to a value of 4.

（C）External BGP (EBGP) exchanges routing information.

（D）The BGP session with peer 10. 127. 0. 75 is established.

正解：C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

What is true about the Fitter override option in the application control profile?

（A）Helps to view the application control signatures for a specific category

（B）Helps to control specific signature and applications

（C）Helps to configure actions for predefined categories

（D）Helps to categorize applications based on behavior risk or on technology

正解：D 解答を投票する

質問 5

Refer to the exhibit, which shows a network diagram.

Which protocol should you use to configure the FortiGate cluster?

（A）FGSP

（B）VRRP

（C）FGCP in active-active mode

（D）FGCP in active-passive mode

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Refer to the exhibits, which contain the network topology and BGP configuration for a hub.
Exhibit A.

Exhibit B.

An administrator is trying to configure ADVPN with a hub and spoke VPN setup using iBGP. All the VPNs are up and connected to the hub. The hub is receiving route information from both spokes over iBGP; however the spokes are not receiving route information from each other.
What change must the administrator make to the hub BGP configuration so that the routes learned from one spoke are forwarded to the other spoke?

（A）Enable route redistribution under config router bgp

（B）Add a prefix list to the hub that permits routes to be shared between the spokes

（C）Configure auto-discovery-sender on the hub

（D）Configure the hub as a route reflector

正解：C 解答を投票する

質問 7

Refer to the exhibit, which contains a partial configuration of the global system.

What can you conclude from the output?

（A）set strict-d^rty-session-check enable command instructs the FortiGate to offload all dirty session traffic to its SPU

（B）set check-protocol-header loose command enables hardware acceleration on this FortiGate device.

（C）set av-failopen pass command instructs the FortiGate to offload all traffic that uses the antivirus proxy to NP.

（D）set memory-use-threshoId-extreme command instructs the FortiGate to disable hardware acceleration if the memory extreme threshold reaches 95%

正解：B 解答を投票する

質問 8

You are testing the implementation of a new custom remote desktop application in your network In which two ways can you eliminate false positives in IPS during this testing phase? (Choose two)

（A）Enable the preserve source pore option in the firewall policy

（B）Permanently bypass the affected endpoints

（C）Adjust the rate-based signature threshold and its duration.

（D）Create an IP address exception

正解：B、C 解答を投票する

NSE7_EFW-7.2 無料問題集「Fortinet NSE 7 - Enterprise Firewall 7.2」

弊社を連絡する

関連リンク

トップ試験