NSE7_EFW-7.2試験無料問題集（82題）「Fortinet NSE 7

出題：1

Exhibit.

Refer to the exhibit, which contains a partial VPN configuration.
What can you conclude from this configuration1?

A. FortiGate creates separate virtual interfaces for each dial up client.

B. The VPN should use the dynamic routing protocol to exchange routing information Through the tunnels.

C. Dead peer detection s disabled.

D. The routing table shows a single IPSec virtual interface.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Exhibit.

Refer to the exhibit which provides information on BGP neighbors
What can you conclude from this command output?

A. The local FortiGate is having a fully established and active BGP connection with its peer

B. The local FortiGate is missing the config neighbor command in its BGP configuration

C. The local FortiGate has initiated a TCP connection, but there is no response from its BGP peer

D. The local FortiGate starts sending its routing table with its iBGP peer

正解：C 解答を投票する

出題：3

Refer to the exhibit, which contains information about an IPsec VPN tunnel.

What two conclusions can you draw from the command output? (Choose two.)

A. The IKE version is 2.

B. Dead peer detection is set to enable.

C. Forward error correction in phase 2 is set to enable.

D. Both IPsec SAs are loaded on the kernel.

正解：A,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Refer to the exhibit, which shows an ADVPN network,

An administrator must configure an ADVPN using IBGP and EBGP to connect overlay network 1 with 2.
What must the administrator configure in the phase 1 VPN IPSEC configuration of the Hub2¢ub tunnels?

A. set auto-discovery-forwarder enable

B. set auto-discovery-sender enable

C. set auto-discovery-receiver enable

D. set add-route enable

正解：A 解答を投票する

出題：5

An administrator configured the following command on FortiGate
config router ospf
sec reszart-mode graceful-restart
Which two statements correctly describe the result of the above command? (Choose two.)

A. The OSPF neighbor that receives the grace link-state advertisement (LSA) will enter into helper mode

B. In an HA cluster FortiGate devices will keep the OSPF routes in their routing table to avoid traffic interruption during an HA failover

C. After the default 40 seconds wait time the OSPF neighbors will resume communication with the restarting router

D. FortiGate is configured with graceful restart and will exit graceful mode, if the network topology changes

正解：A,C 解答を投票する

出題：6

Refer to the exhibit, which shows a custom signature.

Which two modifications must you apply to the configuration of this custom signature so that you can save it on FortiGate? (Choose two.)

A. Ensure that the header syntax is F-SBID.

B. Start options with --.

C. Add severity.

D. Add attack_id.

正解：A,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Which two statements about the BFD parameter in BGP are true? (Choose two.)

A. It allows failure detection in less than one second.

B. It detects only two-way failures.

C. The two routers must be connected to the same subnet.

D. It is supported for neighbors over multiple hops.

正解：A,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

Refer to the exhibit, which shows information about an OSPF interface
What two conclusions can you draw from this command output? (Choose two.)

A. NGFW-1 sends its LSA updates to 224.0.0. 5 address

B. NGFW-1 sends its LSA updates to 224.0.0.6 address

C. NGFW-1 forms neighbor adjacency only with DR and BDR router.

D. NGFW-1 forms neighbor adjacency only if other OSPF routers match the wait time of 40 seconds

正解：B,C 解答を投票する

出題：9

In which two ways does fortiManager function when it is deployed as a local FDS? (Choose two)

A. It provides VM license validation services

B. lt can be configured as an update server a rating server or both

C. It caches available firmware updates for unmanaged devices

D. It supports rating requests from non-FortiGate devices.

正解：A,B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

NSE7_EFW-7.2試験無料問題集「Fortinet NSE 7 - Enterprise Firewall 7.2 認定」