NSE7_EFW-7.2問題集、Fortinet実際の試験問題

質問 1

Which FortiGate in a Security I auric sends togs to FortiAnalyzer?

A. Only the root FortiGate.

B. Each FortiGate in the Security fabric.

C. The FortiGate devices performing network address translation (NAT) or unified threat management (UTM). if configured.

D. Only the last FortiGate that handled a session in the Security Fabric

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 2

Refer to the exhibits, which contain the network topology and BGP configuration for a hub.
Exhibit A.

Exhibit B.

An administrator is trying to configure ADVPN with a hub and spoke VPN setup using iBGP. All the VPNs are up and connected to the hub. The hub is receiving route information from both spokes over iBGP; however the spokes are not receiving route information from each other.
What change must the administrator make to the hub BGP configuration so that the routes learned from one spoke are forwarded to the other spoke?

A. Configure auto-discovery-sender on the hub

B. Enable route redistribution under config router bgp

C. Configure the hub as a route reflector

D. Add a prefix list to the hub that permits routes to be shared between the spokes

正解: A

質問 3

Which statement is true regarding the Bidirectional Forwarding Detection protocol in BGP?

A. BFD is used to detect one way device failure

B. BFD is only supported when two FortiGate devices are directly connected on the same network

C. BFD is enabled under config router bfd configuration

D. BFD is using BGP keepalive messages to check the status of BGP peer

正解: A

質問 4

Exhibit.

Refer to exhibit, which shows a central management configuration
Which server will FortiGate choose for web filler rating requests if 10.0.1.240 is experiencing an outage?

A. Public FortiGuard servers

B. 10.0.1.243

C. 10.0.1.244

D. 10.0.1.242

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 5

Exhibit.

Refer to the exhibit, which shows a partial touting table
What two concisions can you draw from the corresponding FortiGate configuration? (Choose two.)

A. OSPI is configured to run over IPSec.

B. net-device is enabled in the tunnel IPSec phase 1 configuration

C. IPSec Tunnel aggregation is configured

D. add-route is disabled in the tunnel IPSec phase 1 configuration.

正解: B,D

解説: (PassTest メンバーにのみ表示されます)

質問 6

You created a VPN community using VPN Manager on FortiManager. You also added gateways to the VPN community. Now you are trying to create firewall policies to permit traffic over the tunnel however, the VPN interfaces do not appear as available options.

A. install the VPN community and gateway configuration on the fortiGate devices so that the VPN interfaces appear on the Policy Objects on fortiManager.

B. Create interface mappings for the IPsec VPN interfaces before you use them in a policy.

C. Configure the phase 1 settings in the VPN community that you didnt initially configure. FortiGate automatically generates the interfaces after you configure the required settings

D. Refresh the device status using the Device Manager so that FortiGate populates the IPSec interfaces

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 7

How are bulk configuration changes made using FortiManager CLI scripts? (Choose two.)

A. When run on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.

B. When run on the All FortiGate in ADOM, changes are automatically installed without the creation of a new revision history.

C. When run on the Policy Package, ADOM database, you must use the installation wizard to apply the changes to the managed FortiGate device.

D. When run on the Device Database, changes are applied directly to the managed FortiGate device.

正解: A,C

質問 8

Exhibit.

Refer to the exhibit which provides information on BGP neighbors
What can you conclude from this command output?

A. The local FortiGate starts sending its routing table with its iBGP peer

B. The local FortiGate is missing the config neighbor command in its BGP configuration

C. The local FortiGate is having a fully established and active BGP connection with its peer

D. The local FortiGate has initiated a TCP connection, but there is no response from its BGP peer

正解: D

質問 9

Which two statements about the BFD parameter in BGP are true? (Choose two.)

A. It allows failure detection in less than one second.

B. The two routers must be connected to the same subnet.

C. It detects only two-way failures.

D. It is supported for neighbors over multiple hops.

正解: A,D

解説: (PassTest メンバーにのみ表示されます)

Fortinet NSE 7 - Enterprise Firewall 7.2 - NSE7_EFW-7.2 模擬練習