NSE7_SAC-6.2無料問題集「Fortinet NSE 7

質問 1

An administrator is deploying APs that are connecting over an IPsec network. All APs have been configured to connect to FortiGate manually. FortiGate can discover the APs and authorize them. However, FortiGate is unable to establish CAPWAPtunnels to manage the APs.
Which configuration setting can the administrator perform to resolve the problem?

（A）Upgradethe FortiAP firmware image to ensure compatibility with the FortiOS version.

（B）Assign a custom AP profile for the remote APs with the set mpls-connection option enabled.

（C）Decrease the CAPWAP tunnel MTU size for APs to prevent fragmentation.

（D）Enable CAPWAP administrative access on the IPsec interface.

正解：D 解答を投票する

質問 2

Examine the sections of the configuration shown in the following output;

What action will the FortiGate take when using OCSP certificate validation?

（A）FortiGate will use the OCSP server 10.0.1.150 even when there is a different OCSP IP address in theocsp-override-server option under config user peer.

（B）FortiGate will invalidate the certificate if the OSCP server is unavailable.

（C）FortiGate will reject the certificate if the OCSP server replies that the certificate is unknown.

（D）FortiGate will use the OCSP server 10.0.1.150 even when the OCSP URL field in the user certificate contains a different OCSP server IP address.

正解：B 解答を投票する

質問 3

Which two statements about the use of digital certificates are true? (Choose two.)

（A）An intermediate CA can sign another intermediate CA certificate.

（B）An intermediate CA can validate the end entity certificate signed by another intermediate CA

（C）The end entity's certificate can only be created by an intermediate CA.

（D）An intermediate CA can sign server certificates.

正解：A、B 解答を投票する

NSE7_SAC-6.2 無料問題集「Fortinet NSE 7 - Secure Access 6.2」

弊社を連絡する

関連リンク

トップ試験