NSE7_NST-7.2問題集、Fortinet実際の試験問題

質問 1

Which of the following regarding protocol states is true?

A. proto_state=10 indicates an established TCP session.

B. proto_state=00 indicates that UDP traffic flows in both directions.

C. proto state=01 indicates one-way ICMP traffic.

D. proto_state-01 indicates an established TCP session.

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 2

Refer to the exhibit, which shows the omitted output of FortiOS kernel slabs.

Which statement is true?

A. The total slab size of the ip6_session slab is 1300 kB and is associated with the kernel.

B. The total slab size of the sctp_session slab is 0 kB and is associated with the user space

C. The total slab size of the tcp_sessior. slab Is 7500 kB and is associated with the kernel.

D. The total slab size of the ip_session slab is 3600 kB and is associated with the user space.

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 3

Refer to the exhibit, which shows the output of a real-time debug.

Which statement about this output is true?

A. This web request was inspected using the rtgd-allowweb filter profile.

B. The requested URL belongs to category ID 255.

C. FortiGate found the requested URL in its local cache.

D. The server hostname was extracted from the SNI in the client request, or from the CN in the server certificate

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 4

Exhibit.

Refer to the exhibit, which contains the partial output of the get vpn ipsec tunnel details command. Based on the output, which two statements are correct? (Choose two.)

A. Different SPI values are a result of auto-negotiation being disabled for phase 2 selectors.

B. The npu_flag for this tunnel is 02

C. Anti-replay is enabled.

D. The npu_flag for this tunnel is 03.

正解: B,C

解説: (PassTest メンバーにのみ表示されます)

Fortinet NSE 7 - Network Security 7.2 Support Engineer - NSE7_NST-7.2 模擬練習