NSE7_EFW-6.4試験無料問題集（124題）「Fortinet NSE 7

出題：1

View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.

Why didn't the tunnel come up?

A. The pre-shared keys do not match.

B. The remote gateway's phase 2 configuration does not match the local gateway's phase 2 configuration.

C. The remote gateway's phase 1 configuration does not match the local gateway's phase 1 configuration.

D. The remote gateway is using aggressive mode and the local gateway is configured to use man mode.

正解：C 解答を投票する

出題：2

Examine the partial output from two web filter debug commands; then answer the question below:

Based on the above outputs, which is the FortiGuard web filter category for the web site www.fgt99.com?

A. Business.

B. Finance and banking

C. General organization.

D. Information technology.

正解：A 解答を投票する

出題：3

View the exhibit, which contains the output of a debug command, and then answer the question below.

Which of the following statements about the exhibit are true? (Choose two.)

A. The local FortiGate has been elected as the OSPF backup designated router.

B. In the network on port4, two OSPF routers are down.

C. Port4 is connected to the OSPF backbone area.

D. The local FortiGate's OSPF router ID is 0.0.0.4

正解：C,D 解答を投票する

出題：4

Examine the output from the 'diagnose vpn tunnel list' command shown in the exhibit; then answer the question below.

Which command can be used to sniffer the ESP traffic for the VPN DialUP_0?

A. diagnose sniffer packet any 'port 500'

B. diagnose sniffer packet any 'port 4500'

C. diagnose sniffer packet any 'host 10.0.10.10'

D. diagnose sniffer packet any 'esp'

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Which configuration can be used to reduce the number of BGP sessions in an IBGP network?

A. Neighbor group

B. Route reflector

C. Next-hop-self

D. Neighbor range

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

View the exhibit, which contains a partial routing table, and then answer the question below.

Assuming all the appropriate firewall policies are configured, which of the following pings will FortiGate route? (Choose two.)

A. Source IP address 10.72.3.52, Destination IP address 10.1.0.254.

B. Source IP address 10.1.0.24, Destination IP address 10.72.3.20.

C. Source IP address 10.73.9.10, Destination IP address 10.72.3.15.

D. Source IP address 10.72.3.27, Destination IP address 10.1.0.52.

正解：A,D 解答を投票する

出題：7

An administrator wants to capture ESP traffic between two FortiGates using the built-in sniffer. If the administrator knows that there is no NAT device located between both FortiGates, what command should the administrator execute?

A. diagnose sniffer packet any 'udp port 500 or udp port 4500'

B. diagnose sniffer packet any 'udp port 500'

C. diagnose sniffer packet any 'esp'

D. diagnose sniffer packet any 'udp port 4500'

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator noticed that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link-failed-signal to fix the problem. Which statement is correct regarding this command?

A. Sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.

B. Forces the former primary device to shut down all its non-heartbeat interfaces for one second while the failover occurs.

C. Sends a link failed signal to all connected devices.

D. Disables all the non-heartbeat interfaces in all the HA members for two seconds after a failover.

正解：B 解答を投票する

出題：9

Two independent FortiGate HA clusters are connected to the same broadcast domain. The administrator has reported that both clusters are using the same HA virtual MAC address. This creates a duplicated MAC address problem in the network. What HA setting must be changed in one of the HA clusters to fix the problem?

A. Group name.

B. Session pickup.

C. Gratuitous ARPs.

D. Group ID.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

View the exhibit, which contains the output of a debug command, and then answer the question below.

Which one of the following statements about this FortiGate is correct?

A. It is currently in memory conserve mode because of high memory usage.

B. It is currently in system conserve mode because of high CPU usage.

C. It is currently in extreme conserve mode because of high memory usage.

D. It is currently in proxy conserve mode because of high memory usage.

正解：A 解答を投票する

NSE7_EFW-6.4試験無料問題集「Fortinet NSE 7 - Enterprise Firewall 6.4 認定」