NSE7_EFW-6.4試験無料問題集（124題）「Fortinet NSE 7

出題：1

Refer to the exhibit, which contains partial output from an IKE real-time debug.

Based on the debug output, which phase 1 setting is enabled in the configuration of this VPN?

A. auto-discovery-shortcut

B. auto-discovery-forwarder

C. auto-discovery-receiver

D. auto-discovery-sender

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Which two statements about OCVPN are true? (Choose two.)

A. FortiGate devices under different FortiCare accounts can be used to form OCVPN.

B. OCVPN offers only Hub-Spoke VPNs.

C. OCVPN supports static and dynamic IPs in WAN interface.

D. Only root vdom supports OCVPN.

正解：C,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

View the global IPS configuration, and then answer the question below.

Which of the following statements is true regarding this configuration?

A. New packets will be passed through without inspection if the IPS socket buffer runs out of memory.

B. IPS will use the faster matching algorithm which is only available for units with more than 4 GB memory.

C. IPS will scan every byte in every session.

D. FortiGate will spawn IPS engine instances based on the system load.

正解：C 解答を投票する

出題：4

Refer to the exhibit, which shows a session entry. Which statement about this session is true?

A. It is a TCP session in the established state, from 10.1.10.10 to 10.200.5.1.

B. It is an ICMP session from 10.1.10.10 to 10.200.5. 1.

C. It is an ICMP session from 10.1.10.10 to 10.200.1.1.

D. It is a TCP session in close_wait state, from 10. l. 10.10 to 10.200.1.1.

正解：B 解答を投票する

出題：5

Which two conditions must be met for a statistic route to be active in the routing table? (Choose two.)

A. The link health monitor (if configured) is up.

B. The outgoing interface is up.

C. The next-hop IP address is up.

D. There is no other route, to the same destination, with a higher distance.

正解：A,B 解答を投票する

出題：6

Which two statements about the Security Fabric are true? (Choose two.)

A. All FortiGate devices in the Security Fabric must have bidirectional FortiTelemetry connectivity.

B. FortiGate uses FortiTelemetry protocol to communicate with FortiAnalyzer.

C. Only the root FortiGate collects network information and forwards it to FortiAnalyzer.

D. Branch FortiGate devices must be configured first.

正解：A,B 解答を投票する

出題：7

Examine the following partial output from a sniffer command; then answer the question below.

What is the meaning of the packets dropped counter at the end of the sniffer?

A. Number of packets that matched the sniffer filter but could not be captured by the sniffer.

B. Number of total packets dropped by the FortiGate.

C. Number of packets that matched the sniffer filter and were dropped by the FortiGate.

D. Number of packets that didn't match the sniffer filter.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

Which two statements about bulk configuration changes made using FortiManager CLI scripts are correct? (Choose two.)

A. When run on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate device.

B. When run on the All FortiGate in ADOM, changes are automatically installed without the creation of a new revision history.

C. When run on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate device.

D. When run on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.

正解：C,D 解答を投票する

出題：9

Refer to the exhibit, which contains the partial output of a diagnose command.

Based on the output, which two statements are correct? (Choose two.)

A. The remote gateway IP is 10.200.4.1.

B. Anti-replay is enabled

C. DPD is disabled.

D. Quick mode selectors are disabled.

正解：A,B 解答を投票する

出題：10

View the central management configuration shown in the exhibit, and then answer the question below.

Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?

A. 10.0.1.240

B. 10.0.1.242

C. 10.0.1.244

D. One of the public FortiGuard distribution servers

正解：D 解答を投票する

NSE7_EFW-6.4試験無料問題集「Fortinet NSE 7 - Enterprise Firewall 6.4 認定」