NSE7_EFW無料問題集「Fortinet NSE7 Enterprise Firewall

質問 1

View the exhibit, which contains the output of a debug command, and then answer the question below.

What statement is correct about this FortiGate?

（A）It is currently in system conserve mode because of high memory usage.

（B）It is currently in FD conserve mode.

（C）It is currently in system conserve mode because of high CPU usage.

（D）It is currently in kernel conserve mode because of high memory usage.

正解：A 解答を投票する

質問 2

An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage. However, after the changes, one network application started to have problems. During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before the arrival of the SYN/ACKs. When the SYN/ACK packets arrive to the FortiGate, the unit has already deleted the respective sessions. Which TCP session timer must be increased to fix this problem?

（A）TCP half close.

（B）TCP session time to live.

（C）TCP half open.

（D）TCP time wait.

正解：C 解答を投票する

質問 3

A corporate network allows Internet Access to FSSO users only. The FSSO user student does not have Internet access after successfully logged into the Windows AD network. The output of the 'diagnose debug authd fsso list' command does not show student as an active FSSO user. Other FSSO users can access the Internet without problems. What should the administrator check? (Choose two.)

（A）The student workstation's IP subnet must be listed in the CA's trusted list.

（B）At least one of the student's user groups must be allowed by a FortiGate firewall policy.

（C）The user student must not be listed in the CA's ignore user list.

（D）The user student must belong to one or more of the monitored user groups.

正解：B、D 解答を投票する

質問 4

An administrator has configured a FortiGate device with two VDOMs: root and internal. The administrator has also created and inter-VDOM link that connects both VDOMs. The objective is to have each VDOM advertise some routes to the other VDOM via OSPF through the inter-VDOM link. What OSPF configuration settings must match in both VDOMs to have the OSPF adjacency successfully forming? (Choose three.)

（A）Router ID.

（B）OSPF interface cost.

（C）OSPF interface MTU.

（D）Interface subnet mask.

（E）OSPF interface area.

正解：C、D、E 解答を投票する

質問 5

Which of the following statements are true about FortiManager when it is deployed as a local FDS? (Choose two.)

（A）Caches available firmware updates for unmanaged devices.

（B）Provides VM license validation services.

（C）Supports rating requests from both managed and unmanaged devices.

（D）Can be configured as an update server, or a rating server, but not both.

正解：A、B 解答を投票する

質問 6

View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.

Why didn't the tunnel come up?

（A）The remote gateway's phase 1 configuration does not match the local gateway's phase 1 configuration.

（B）The pre-shared keys do not match.

（C）The remote gateway's phase 2 configuration does not match the local gateway's phase 2 configuration.

（D）The remote gateway is using aggressive mode and the local gateway is configured to use man mode.

正解：A 解答を投票する

質問 7

An administrator has configured the following CLI script on FortiManager, which failed to apply any changes to the managed device after being executed.

Why didn't the script make any changes to the managed device?

（A）Commands that start with the # sign are not executed.

（B）CLI scripts will add objects only if they are referenced by policies.

（C）Static routes can only be added using TCL scripts.

（D）Incomplete commands are ignored in CLI scripts.

正解：B 解答を投票する

質問 8

View these partial outputs from two routing debug commands:

Which outbound interface will FortiGate use to route web traffic from internal users to the Internet?

（A）port2

（B）Both port1 and port2

（C）port1

（D）port3

正解：C 解答を投票する

質問 9

View the exhibit, which contains the output of a diagnose command, and the answer the question below.

Which statements are true regarding the Weight value?

（A）It determines which FortiGuard server is used for license validation.

（B）Its initial value is statically set to 10.

（C）Its initial value is calculated based on the round trip delay (RTT).

（D）Its value is incremented with each packet lost.

正解：D 解答を投票する

NSE7_EFW 無料問題集「Fortinet NSE7 Enterprise Firewall - FortiOS 5.4」

弊社を連絡する

関連リンク

トップ試験