NSE7_EFW-7.2試験無料問題集（82題）「Fortinet NSE 7

出題：1

Refer to the exhibit, which contains information about an IPsec VPN tunnel.

What two conclusions can you draw from the command output? (Choose two.)

A. The IKE version is 2.

B. Dead peer detection is set to enable.

C. Forward error correction in phase 2 is set to enable.

D. Both IPsec SAs are loaded on the kernel.

正解：A,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Refer to the exhibit, which shows an OSPF network.

Which types of ink-state advertisements (LSA) will NGFW-1 send, if itis a backup designated router (BDR)?

A. ONGFW-1 will send type 1 and type 2 LSAs.

B. ONGFW-1 will send type 1 and type 4 LSA.

C. NGFW-1 will send type 1and type 3 LSA.

D. ONGFW-1 will send type 1and type 5 LSA.

正解：C 解答を投票する

出題：3

Refer to the exhibit, which shows device registration on FortiManager.

What can you conclude about the Spoke-1 and Spoke-2 configurations with respect to the information cond:
Modified (recent auto-updated)?

A. Based on the policy configuration on NGFW-1, the configuration on both spokes is modified and automatically updated.

B. On both Spoke-1 and Spoke-2, the configuration was changed directly on the FortiGate device, and the changes were automatically retrieved by the device database.

C. On NGFW-A, the configuration was changed and spokes are wailing for an autoupdate.

D. Spoke-1 and Spoke-2 are sharing the same security policy configuration and the same policy package.

正解：C 解答を投票する

出題：4

Which statement about network processor (NP) offloading is true?

A. You can disable the NP for each firewall policy using the command np-acceleration st to loose.

B. The NP provides IPS signature matching

C. The NP checks the session key or IPSec SA

D. For TCP traffic FortiGate CPU offloads the first packets of SYN/ACK and ACK of the three-way handshake to NP

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

You want to improve reliability over a lossy IPSec tunnel.
Which combination of IPSec phase 1 parameters should you configure?

A. fragmentation and fragmentation-mtu

B. Odpd and dpd-retryinterval

C. fec-ingress and fec-egress

D. keepalive and keylive

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Which two statements about the neighbor-group command are true? (Choose two.)

A. It applies common settings in an OSPF area.

B. You can configure it on the GUI.

C. It is combined with the neighbor-range parameter.

D. You can apply it in Internal BGP (IBGP) and External BGP (EBGP).

正解：A,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Exhibit.

Refer to the exhibit, which contains an active-active toad balancing scenario.
During the traffic flow the primary FortiGate forwards the SYN packet to the secondary FortiGate.
What is the destination MAC address or addresses when packets are forwarded from the primary FortiGate to the secondary FortiGate?

A. Secondary physical MAC port1

B. Secondary physical MAC port2 then virtual MAC port2

C. Secondary virtual MAC port1

D. Secondary virtual MAC port1 then physical MAC port1

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

After enabling IPS you receive feedback about traffic being dropped.
What could be the reason?

A. Traffic-submit is set to disable

B. IPS is configured to monitor

C. Fail-open is set to disable

D. Np-accel-mode is set to enable

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

NSE7_EFW-7.2試験無料問題集「Fortinet NSE 7 - Enterprise Firewall 7.2 認定」