FCSS_EFW_AD-7.6試験無料問題集（158題）「Fortinet FCSS - Enterprise Firewall 7.6 Administrator 認定」

出題：1

A vulnerability scan report has revealed that a user has generated traffic to the website example.com using a weak SSL/TLS version supported by the HTTPS web server. What can you do to block all outdated SSL/TLS versions on any HTTPS web server to prevent possible attacks on user traffic?

A. Enable auto-detection of outdated SSL/TLS versions in the SSL/SSH inspection profile to block vulnerable websites.

B. Block invalid SSL certificates in the SSL/SSH inspection profile.

C. Configure the unsupported SSL version and set the minimum allowed SSL version in the HTTPS settings of the SSL/SSH inspection profile.

D. Enable server certificate SNI check in the SSL/SSH inspection profile.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

What does the command set forward-domain <domain_ID> in a transparent VDOM interface do?

A. It configures the interface to prioritize traffic based on the domain ID, enhancing quality of service for specified VLANs.

B. It isolates traffic within a specific VLAN by assigning a broadcast domain to an interface based on the VLAN ID.

C. It assigns a unique domain ID to the interface, allowing it to operate across multiple VLANs within the same VDOM.

D. It restricts the interface to managing traffic only from the specified VLAN, effectively segregating network traffic.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

How does configuring tcp-mss-sender and tcp-mss-receiver affect TCP packets?

A. Allow

B. Fragment

C. Header

D. Payload

正解：D 解答を投票する

出題：4

You receive a FortiAnalyzer alert warning that a 1 TB disk filled up in a day. Upon investigation, you find thousands of unusual DNS log requests, such as JHCMQK.website.com, with no answers. You later discover that DNS exfiltration is occurring through both UDP and TLS. How can you prevent this data theft technique?

A. Use a file filter profile to protect against DNS exfiltration.

B. Use an intrusion prevention system (IPS) profile and DNS exfiltration-related signatures.

C. Enable DNS filter to protect against DNS exfiltration.

D. Enable data loss prevention (DLP) to prevent DNS exfiltration.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

What can be inferred from the OSPF status output shown?

A. Is BDR

B. Is ASBR

C. Is in area 0.0.0.5

D. Supports ECMP

正解：B,C 解答を投票する

出題：6

Refer to the exhibit.

An HA configuration of an active-active (A-A) cluster with the same HA uptime shown.
You want HQ-NGFW-2 to handle the Core2 VDOM traffic.
Which modification must you make to achieve this outcome?

A. Reboot HQ-NGFW-2.

B. Enable override in virtual duster 2 for HQ-NGFW-2.

C. Change the priority from 120 to 200 for HQ-NGFW-2.

D. Change the priority from 100 to 160 for HQ-NGFW-2.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Refer to the exhibit, which shows an ADVPN network.

An administrator must configure an ADVPN using IBGP and EBGP to connect overlay network 1 with 2.
What must the administrator configure in the phase 1 VPN IPSEC configuration of the Hub2Hub tunnels?

A. set auto-discovery-forwarder enable

B. set auto-discovery-sender enable

C. set auto-discovery-receiver enable

D. set add-route enable

正解：A 解答を投票する

出題：8

An administrator applied a block-all IPS profile for client and server targets to secure the server, but the database team reported the application stopped working immediately after. How can an administrator apply IPS in a way that ensures it does not disrupt existing applications in the network?

A. Select flow mode in the IPS profile to accurately analyze application patterns.

B. Limit the IPS profile to server targets only to avoid blocking connections from the server to clients.

C. Set the IPS profile signature action to default to discard all possible false positives.

D. Use an IPS profile with all signatures in monitor mode and verify patterns before blocking.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

Which two options should you consider to scale performance using an additional FortiGate?

A. FGSP

B. FGCP Active-Active

C. FGCP Active-Passive

D. VRRP

正解：A,B 解答を投票する

出題：10

Refer to the exhibit.

A partial enterprise network is shown.
What must you configure so that FortiGate A and other OSPF routers in the backbone learn about prefixes generated within the RIP domain?

A. Set the area 0.0.0.1 type to stub on FortiGate A and B.

B. Configure a distribute-route-map-in on FortiGate B.

C. Enable RIP redistribution on FortiGate B.

D. Configure a virtual link between FortiGate A and B.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：11

You want to know which content processor (CP) model FortiGate contains.
Which command should you enter?

A. get hardware status

B. get hardware cp

C. diagnose hardware deviceinfo

D. diagnose hardware lspci | grep 4e36

正解：A 解答を投票する

出題：12

How can FortiGate analyze HTTPS traffic on non-standard port 8443?

A. Enable IPS

B. TLS 1.2

C. Add 443 and 8443 mapping

D. Proxy mode

正解：C 解答を投票する

出題：13

An administrator configured the FortiGate devices in an enterprise network to join the Fortinet Security Fabric. The administrator has a list of IP addresses that must be blocked by the data center firewall. This list is updated daily.
How can the administrator automate a firewall policy with the daily updated list?

A. With an external connector from Threat Feeds

B. With FortiNAC

C. With a Security Fabric automation

D. With FortiAnalyzer

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：14

Refer to the exhibit.
A revision history window at the FortiManager device layer is shown.

The IT team is trying to identify the administrator responsible for the most recent update to the FortiGate device database.
What can the IT team conclude?

A. The user script_manager, an API user from the Fortinet Developer Network (FDN). is retrieving a configuration.

B. The retrieve process was automatically triggered by a Remote FortiGate Directly (via CLI) script.

C. To identify the user who created the event, they must view it on the Configuration and Installation widget on FortiGate at the FortiManager device layer.

D. To identify the user who created the event, in the FortiManager system logs, they must use the type=script filter in the user field.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：15

Refer to the exhibit, which shows a LAN interface connected from FortiGate to two FortiSwitch devices.

What two conclusions can you draw from the corresponding LAN interface? (Choose two.)

A. The LAN interface must use a 802.3ad type interface.

B. FortiGate is using an SD-WAN-type interface to connect to a FortiSwitch device with MCLAG.

C. You must enable STP or RSTP on FortiGate and FortiSwitch to avoid layer 2 loopbacks.

D. This connection is using a FortiLInk to manage VLANs on FortiGate.

正解：A,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

FCSS_EFW_AD-7.6試験無料問題集「Fortinet FCSS - Enterprise Firewall 7.6 Administrator 認定」