最新の無料NSE7_EFW-7.0効率的問題集をダウンロード2024年01月18日更新された165問がある
Fortinet NSE7_EFW-7.0試験練習テスト解答
Fortinet NSE7_EFW-7.0認定試験は、エンタープライズレベルのファイアウォール技術における専門知識を証明する、世界的に認められた認定資格です。この認定試験は、Fortinetのファイアウォール技術に関する知識と、複雑なネットワークセキュリティソリューションを実装および管理する能力を総合的に評価します。この認定資格を取得することは、潜在的な雇用主に、ネットワークインフラストラクチャを管理およびセキュリティを確保するために必要なスキルと専門知識を持っていることを示すことになります。
この試験では、ファイアウォールポリシー、高度なルーティング、VPNテクノロジー、侵入防止、Webフィルタリングなど、幅広いトピックをカバーしています。候補者は、Fortinetエンタープライズファイアウォールソリューションを深く理解し、複雑なネットワーク環境でそれらを実装できる必要があります。認定試験は、ネットワークセキュリティに関連する問題をトラブルシューティングおよび解決する候補者の能力をテストするように設計されています。
Fortinet NSE 7-エンタープライズファイアウォール7.0認定は、ITセキュリティ業界で高く評価されており、多くの組織からファイアウォールの専門家のスキルと専門知識を測定する標準として認められています。この認定は、高度なセキュリティテクノロジーとソリューションに焦点を当てたNSE 8など、高レベルのFortinet認定の前提条件でもあります。
質問 # 33
Refer to the exhibit, which contains the partial output of a diagnose command.
Based on the output, which two statements are correct? (Choose two.)
- A. Remote gateway IP is 10.200.4.1.
- B. Anti-replay is enabled.
- C. Quick mode selectors are disabled.
- D. DPD is disabled.
正解：A、B
質問 # 34
Examine the IPsec configuration shown in the exhibit; then answer the question below.
An administrator wants to monitor the VPN by enabling the IKE real time debug using these commands:
diagnose vpn ike log-filter src-addr4 10.0.10.1
diagnose debug application ike -1
diagnose debug enable
The VPN is currently up, there is no traffic crossing the tunnel and DPD packets are being interchanged between both IPsec gateways. However, the IKE real time debug does NOT show any output .
Why isn't there any output?
- A. The log-filter setting is set incorrectly. The VPN's traffic does not match this filter.
- B. The IKE real time debug shows error messages only. If it does not provide any output, it indicates that the tunnel is operating normally.
- C. The IKE real time shows the phases 1 and 2 negotiations only. It does not show any more output once the tunnel is up.
- D. The IKE real time debug shows the phase 1 negotiation only. For information after that, the administrator must use the IPsec real time debug instead: diagnose debug application ipsec -1.
正解：A
質問 # 35
Examine the output of the 'get router info ospf interface' command shown in the exhibit; then answer the question below.
Which statements are true regarding the above output? (Choose two.)
- A. The port4 interface is connected to the OSPF backbone area.
- B. There are at least 5 OSPF routers connected to the port4 network.
- C. Two OSPF routers are down in the port4 network.
- D. The local FortiGate has been elected as the OSPF backup designated router.
正解：A、B
解説：
on BROADCAST network there are 4 neighbors, among which 1*DR +1*BDR. So our FG has 4 neighbors, but create adjacency only with 2 (with DR and BDR). 2 neighbors DRother (not down).
質問 # 36
View the exhibit, which contains the partial output of a diagnose command, and then answer the question below.
Based on the output, which of the following statements is correct?
- A. Anti-reply is enabled.
- B. Quick mode selectors are disabled.
- C. DPD is disabled.
- D. Remote gateway IP is 10.200.5.1.
正解：A
質問 # 37
Which configuration can be used to reduce the number of BGP sessions in an IBGP network?
- A. Neighbor range
- B. Route reflector Next-hop-self Neighbor group
正解：B
質問 # 38
Which of the following statements is true regarding a FortiGate configured as an explicit web proxy?
- A. FortiGate limits the number of simultaneous sessions per explicit web proxy user The limit CAN be modified by the administrator
- B. FortiGate limits the number of workstations that authenticate using the same web proxy user credentials. This limit CANNOT be modified by the administrator.
- C. FortiGate limits the total number of simultaneous explicit web proxy users.
- D. FortiGate limits the number of simultaneous sessions per explicit web proxy user. This limit CANNOT be modified by the administrator.
正解：C
質問 # 39
Refer to the exhibit, which contains the partial output of the get vpn ipsec tunnel details command.
Based on the output, which two statements are correct? (Choose two.)
- A. Phase 2 authentication is set to sha1 on both sides.
- B. Hub2Spoke1 is a policy-based VPN.
- C. Hub2Spoke1 is configured on interface wan2.
- D. Anti-replay is disabled.
正解：A、C
質問 # 40
View the exhibit, which contains the output of diagnose sys session list, and then answer the question below.
If the HA ID for the primary unit is zero (0), which statement is correct regarding the output?
- A. This session is for HA heartbeat traffic.
- B. The inspection of this session has been offloaded to the slave unit.
- C. This session is synced with the slave unit.
- D. This session cannot be synced with the slave unit.
正解：C
質問 # 41
Refer to the exhibit, which contains partial output from an IKE real-time debug.
Based on the debug output, which phase 1 setting is enabled in the configuration of this VPN?
- A. auto-discovery-forwarder
- B. auto-discovery-sender
- C. auto-discovery-receiver
- D. auto-discovery-shortcut
正解：B
質問 # 42
View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.
Which statements about this debug output are correct? (Choose two.)
- A. The negotiation is using AES128 encryption with CBC hash.
- B. The remote gateway IP address is 10.0.0.1.
- C. It shows a phase 1 negotiation.
- D. The initiator has provided remote as its IPsec peer ID.
正解：C、D
質問 # 43
Exhibits:
Refer to the exhibits, which contain the network topology and BGP configuration for a hub.
An administrator is trying to configure ADVPN with a hub-spoke VPN setup using iBGP. All the VPNs are up and connected to the hub. The hub is receiving route information from both spokes over iBGP; however, the spokes are not receiving route information from each other.
What change must the administrator make to the hub BGP configuration so that the routes learned by one spoke are forwarded to the other spokes?
- A. Make the configuration of remote-as different from the configuration of local-as.
- B. Configure an individual neighbor and remove neighbor-range configuration.
- C. Change the router id to 10.1.0.254.
- D. Configure the hub as a route reflector client.
正解：D
質問 # 44
Which ADVPN configuration must be configured using a script on FortiManager, when using VPN Manager to manage FortiGate VPN tunnels?
- A. Set protected network to all
- B. Enable AD-VPN in IPsec phase 1
- C. Configure IP addresses on IPsec virtual interfaces
- D. Disable add-route on hub
正解：B
質問 # 45
View the exhibit, which contains the output of a BGP debug command, and then answer the question below.
Which of the following statements about the exhibit are true? (Choose two.)
- A. For the peer 10.125.0.60, the BGP state of is Established.
- B. The local BGP peer has not established a TCP session to the BGP peer 10.200.3.1.
- C. The local BGP peer has received a total of three BGP prefixes.
- D. Since the BGP counters were last reset, the BGP peer 10.200.3.1 has never been down.
正解：A、B
質問 # 46
Refer to the exhibit, which shows the output of a debug command.
Which two statements about the output are true? (Choose two.)
- A. The local FortiGate is the backup designated router.
- B. The local FortiGate OSPF router ID is 0.0.0.4.
- C. In the network connected to port4, two OSPF routers are down.
- D. Port4 is connected to the OSPF backbone area.
正解：B、D
質問 # 47
View the exhibit, which contains the output of diagnose sys session stat, and then answer the question below.
Which statements are correct regarding the output shown? (Choose two.)
- A. There are 166 TCP sessions waiting to complete the three-way handshake.
- B. All the sessions in the session table are TCP sessions.
- C. No sessions have been deleted because of memory pages exhaustion.
- D. There are 0 ephemeral sessions.
正解：C、D
解説：
https://kb.fortinet.com/kb/documentLink.do?externalID=FD40578
質問 # 48
Refer to the exhibit, which contains the partial output of the get vpn ipsec tunnel details command.
Based on the output, which two statements are correct? (Choose two.)
- A. Phase 2 authentication is set to sha1 on both sides.
- B. Hub2Spoke1 is a policy-based VPN.
- C. Hub2Spoke1 is configured on interface wan2.
- D. Anti-replay is disabled.
正解：A、C
質問 # 49
A FortiGate is configured as an explicit web proxy. Clients using this web proxy are reposting DNS errors when accessing any website.
The administrator executes the following debug commands and observes that the n-dns-timeout counter is increasing:
What should the administrator check to fix the problem?
- A. The connectivity between the FortiGate unit and the DNS server.
- B. That DNS traffic from client workstations is allowed by the explicit web proxy policies.
- C. The connectivity between the client workstations and the DNS server.
- D. That DNS service is enabled in the explicit web proxy interface.
正解：A
質問 # 50
Which statement about protocol options is true?
- A. Protocol options allows administrators the ability to configure the Any setting for all enabled protocols which provides the most efficient use of system resources.
- B. Protocol options allows administrators to configure which Layer 4 port numbers map to upper-layer protocols, such as HTTP, SMTP, FTP, and so on.
- C. Protocol options allow administrators to configure a maximum number of sessions for each configured protocol.
- D. Protocol options allows administrators a streamlined method to instruct FortiGate to block all sessions corresponding to disabled protocols.
正解：B
質問 # 51
Examine the output of the 'get router info bgp summary' command shown in the exhibit; then answer the question below.
Which statements are true regarding the output in the exhibit? (Choose two.)
- A. BGP peer 10.200.3.1 has never been down since the BGP counters were cleared.
- B. The local BGP peer has received a total of 3 BGP prefixes.
- C. BGP state of the peer 10.125.0.60 is Established.
- D. Local BGP peer has not received an Open Confirm from 10.200.3.1.
正解：C、D
質問 # 52
Refer to the exhibit, which shows the output of a diagnose command
What can you conclude from the RTT value?
- A. It determines which FortiGuard server is used for license validation.
- B. Its value represents the time it takes to receive a response after a rating request is sent to a particular server.
- C. Its initial value is statically set to 10.
- D. Its value is incremented with each packet lost.
正解：B
質問 # 53
Examine the output of the 'diagnose ips anomaly list' command shown in the exhibit; then answer the question below.
Which IP addresses are included in the output of this command?
- A. Those whose traffic was detected as an anomaly by an IPS sensor.
- B. Those whose traffic matches a DoS policy.
- C. Those whose traffic exceeded a threshold of a matching DoS policy.
- D. Those whose traffic matches an IPS sensor.
正解：B
質問 # 54
......
最新の検証済みNSE7_EFW-7.0問題集と解答合格保証もしくは全額返金です：https://www.passtest.jp/Fortinet/NSE7_EFW-7.0-shiken.html
最新の認証試験NSE7_EFW-7.0問題集練習テスト解答はこちら：https://drive.google.com/open?id=1QGsG4g4sFwfApa4j0heKFIpO77iUIX_0