NSE7_EFW-7.2試験無料問題集（82題）「Fortinet NSE 7

出題：1

Refer to the exhibit, which contains a TCL script configuration on FortiManager.

An administrator has configured the TCL script on FortiManager, but the TCL script failed to apply any changes to the managed device after being run.
Why did the TCL script fail to make any changes to the managed device?

A. There is no corresponding #! to signify the end of the script.

B. The TCL script must start with #include.

C. The TCL procedure lacks the required loop statements to iterate through the changes.

D. The TCL procedure run_cmd has not been created.

正解：D 解答を投票する

出題：2

Refer to the exhibit.

which contains a partial configuration of the global system. What can you conclude from this output?

A. Only NPs are disabled

B. Only CPs arc disabled

C. NPs and CPs are enabled

D. NPs and CPs arc disabled

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Exhibit.

Refer to the exhibit, which shows a partial touting table
What two concisions can you draw from the corresponding FortiGate configuration? (Choose two.)

A. IPSec Tunnel aggregation is configured

B. OSPI is configured to run over IPSec.

C. net-device is enabled in the tunnel IPSec phase 1 configuration

D. add-route is disabled in the tunnel IPSec phase 1 configuration.

正解：C,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Exhibit.

Refer to the exhibit, which contains an active-active toad balancing scenario.
During the traffic flow the primary FortiGate forwards the SYN packet to the secondary FortiGate.
What is the destination MAC address or addresses when packets are forwarded from the primary FortiGate to the secondary FortiGate?

A. Secondary physical MAC port1

B. Secondary physical MAC port2 then virtual MAC port2

C. Secondary virtual MAC port1

D. Secondary virtual MAC port1 then physical MAC port1

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Which statement is true regarding the Bidirectional Forwarding Detection protocol in BGP?

A. BFD is used to detect one way device failure

B. BFD is enabled under config router bfd configuration

C. BFD is using BGP keepalive messages to check the status of BGP peer

D. BFD is only supported when two FortiGate devices are directly connected on the same network

正解：A 解答を投票する

出題：6

In which two ways does FortiManager function when it is deployed as a local FDS? (Choose two.)

A. It caches available firmware updates for both managed and unmanaged devices

B. It downloads license information for registered and unregistered devices

C. It functions as rating server only for web filtering and antispam services

D. It can be configured as an update server a rating server or both

正解：C,D 解答を投票する

出題：7

How would £=c-ingress and fec-sgress IPsec configuration affect an IPsec tunnel?

A. If fragmentation occurs, FortiGate will allow the packets at the IKE layer.

B. FortiGate will consider all IKEV2 packets as fragmentable.

C. FortiGate will add additional redundant information to reconstruct any lost or erratically received packets.

D. When an FGSP member in FortiGate fails, FortiGate flushes the corresponding tunnels and sends out dead peer detection probes to find unavailable remote peers.

正解：C 解答を投票する

出題：8

Refer to the exhibit which shows an OSPF network.

Which types of link-state advertisements (LSA) will NGFW-1 send if it is a backup designated router (BDR)

A. NGFW-1 will send type 1 and type 5 LSAs

B. NGFW-1 will send type 1 and type 2 LSAs

C. NGFW-1 will send type 1 and type 3 LSAs

D. NGFW-1 will send type 1 and type 4 LSAs.

正解：C 解答を投票する

NSE7_EFW-7.2試験無料問題集「Fortinet NSE 7 - Enterprise Firewall 7.2 認定」