FCSS_EFW_AD-7.4試験無料問題集（78題）「Fortinet FCSS - Enterprise Firewall 7.4 Administrator 認定」

出題：1

An administrator must improve the resiliency of a link by minimizing data loss within the enterprise network that has full path redundancy.
What should the administrator enable on the FortiGate devices that use BGP as dynamic routing protocol between two separate autonomous systems? (Choose two.)

A. graceful-restart

B. bfd

C. ibgp-multipath

D. route-reflector-client

正解：A,B 解答を投票する

出題：2

An administrator configured the FortiGate devices in an enterprise network to join the Fortinet Security Fabric. The administrator has a list of IP addresses that must be blocked by the data center firewall. This list is updated daily.
How can the administrator automate a firewall policy with the daily updated list?

A. With an external connector from Threat Feeds

B. With FortiNAC

C. With a Security Fabric automation

D. With FortiAnalyzer

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Refer to the exhibit, which shows an enterprise network connected to an internet service provider.

The administrator must configure the BGP section of FortiGate A to give internet access to the enterprise network.
Which command must the administrator use to establish a connection with the internet service provider?

A. config redistribute bgp

B. config redistribute ospf

C. config neighbor

D. config router route-map

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

An administrator is configuring two FortiGate devices in an HA cluster. While configuring the devices, the administrator issues the following commands on both HA cluster members:

In which two ways do these commands impact the HA cluster? (Choose two.)

A. They force the former primary to shut down all its interfaces for one second when failover happens, excluding the heartbeat and reserved management interfaces.

B. They force both HA devices for remote link monitoring to detect an issue in the forwarding path.

C. They force the former primary to send gratuitous ARP packets when the failover happens to indicate that the virtual MAC address is now using a different device.

D. They force the switches to update their MAC forwarding tables, when failover happens.

正解：A,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

A company's users on an IPsec VPN between FortiGate A and B have experienced intermittent issues since implementing VXLAN. The administrator suspects that packets exceeding the 1500- byte default MTU are causing the problems.
In which situation would adjusting the interface's maximum MTU value help resolve issues caused by protocols that add extra headers to IP packets?

A. Adjust the MTU on interfaces only if FortiGate has the FortiGuard enterprise bundle, which allows MTU modification.

B. Adjust the MTU on interfaces only in wired connections like PPPoE, optic fiber, and ethernet cable.

C. Adjust the MTU on interfaces in all FortiGate devices that support the latest family of Fortinet SPUs: NP7, CP9 and SP5.

D. Adjust the MTU on interfaces in controlled environments where all devices along the path allow MTU interface changes.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Refer to the exhibit, which shows an ADVPN network.

An administrator must configure an ADVPN using IBGP and EBGP to connect overlay network 1 with 2.
What two options must the administrator configure in BGP? (Choose two.)

A. set attribute-unchanged next-hop

B. set ebgp-enforce-multrhop enable

C. set next-hop-self enable

D. set ibgp-enforce-multihop advpn

正解：B,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Refer to the exhibit, which contains the partial output of an OSPF command.

An administrator is checking the OSPF status of a FortiGate device and receives the output shown in the exhibit.
Which statement on this FortiGate device is correct?

A. The FortiGate device is a backup designated router.

B. The FortiGate device does not support OSPF ECMP.

C. The FortiGate device can inject external routing information.

D. The FortiGate device is in the area 0.0.0.5.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

Refer to the exhibits.
Network topology

Output from the command config system ha

A network diagram and the output from the command config system ha are shown.
The administrator has configured the cluster with the commands shown in the exhibit.
Why is the HA cluster not forming?

A. The administrator must reconfigure the cluster in FGSP mode.

B. The administrator must reconfigure the monitor interface.

C. The administrator must reconfigure the heartbeat interface.

D. The administrator must reconfigure the cluster in active-active mode.

正解：C 解答を投票する

FCSS_EFW_AD-7.4試験無料問題集「Fortinet FCSS - Enterprise Firewall 7.4 Administrator 認定」