NSE7_FSN_AR-7.6試験無料問題集（174題）「Fortinet NSE 7 - Secure Networking 7.6 Architect 認定」

出題：1

Refer to the exhibit.

The output from a collector agent log is shown. The collector agent is showing the status of a workstation as Not Verified. What are two common causes for this message? (Choose two.)

A. Traffic to ports 139 and 445 is blocked.

B. The workstation remote registry service is not running.

C. The workstation has come out of hibernate mode.

D. DNS cannot resolve the workstation name.

正解：A,B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Which exchange lakes care of DoS protection in IKEv2?

A. IKE_Req_INIT

B. Create_CHILD_SA

C. IKE_SA_NIT

D. IKE_Auth

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

If you configure set tcp-mss-sender and set tcp-mss-receiver in a firewall policy, how does it affect the size and handling of TCP packets in the network?

A. The TCP packet modifies the packet size only if no fragmentation occurs.

B. The commands affect both the payload size of the packet and the size of the IP header for handling TCP packets.

C. The maximum segment size permitted in the firewall policy determines whether TCP packets are allowed or denied.

D. Applying the commands in a firewall policy determines the largest payload a device can handle in a single TCP segment.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Refer to the exhibit, which shows the output of a diagnose command. What can you conclude from the RTT value?

A. Its value represents the time it takes to receive a response after a rating request is sent to a particular server.

B. Its value is incremented with each packet lost.

C. Its initial value is statically set to 10.

D. It determines which FortiGuard server is used for license validation.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Refer to the exhibit.

Based on the exhibit, what is the first message with which Spoke 1 replies to the hub, instructing it to bring up the dynamic tunnel when a client generates traffic destined for Spoke 2? (Choose one answer.)

A. Shortcut reply

B. Shortcut forward

C. Shortcut query

D. Shortcut offer

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Refer to the exhibit, which shows the omitted output of a session table entry.

Which two statements are true? (Choose two.)

A. The session has been offloaded.

B. The traffic has been tagged for VLAN 0000.

C. The traffic matches Policy ID 1.

D. NP7 is handling offloading of this session.

正解：A,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Which two statements are true regarding heartbeat messages sent from an FSSO collector agent to FortiGate?
(Choose two.)

A. The heartbeat messages can be seen in the collector agent logs.

B. The heartbeat messages can be seen using the command diagnose debug authd fsso list.

C. The heartbeat messages can be seen on FortiGate using the real-lime FSSO debug.

D. The heartbeat messages must be manually enabled on FortiGate.

正解：A,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

Which of the following regarding protocol states is true? (Choose one answer)

A. proto_state=10 indicates an established TCP session.

B. proto_state=00 indicates that UDP traffic flows in both directions.

C. proto_state=01 indicates one-way ICMP traffic.

D. proto_state=01 indicates an established TCP session.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

Refer to the exhibit, which shows partial outputs from two routing debug commands.

Why is the port2 default route not in the second command output?

A. The port1 default route has a higher priority value than the default route using port2.

B. The port2 interface is disabled in the FortiGate configuration.

C. The port1 default route has a lower priority value than the default route using port2.

D. The port1 default route has a lower distance than the default route using port2.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

NSE7_FSN_AR-7.6試験無料問題集「Fortinet NSE 7 - Secure Networking 7.6 Architect 認定」