最高でNSE7_EFW-6.4最新の2022問題集は100%試験合格率保証付きます
ベストな方法はFortinet NSE7_EFW-6.4練習試験問題集
質問 12
Refer to the exhibit, which contains the output of get system ha status.
Which two statements about the output are true? (Choose two.)
- A. Master is selected based on the priority configured under config system ha.
- B. The slave configuration is synchronized with the master.
- C. The HA management IP is 169.254.0.2.
- D. port7 is used as the HA heartbeat on all devices in the cluster.
正解: A,D
質問 13
Two independent FortiGate HA clusters are connected to the same broadcast domain. The administrator has reported that both clusters are using the same HA virtual MAC address. This creates a duplicated MAC address problem in the network. What HA setting must be changed in one of the HA clusters to fix the problem?
- A. Group name.
- B. Gratuitous ARPs.
- C. Session pickup.
- D. Group ID.
正解: D
解説:
Explanation
https://help.fortinet.com/fos50hlp/54/Content/FortiOS/fortigate-high-availability-52/HA_failoverVMAC.htm
質問 14
View the exhibit, which contains theoutput of get sys ha status, and then answer the question below.
Which statements are correct regarding the output? (Choose two.)
- A. Master is selected because it is the only device in the cluster.
- B. The slave configuration is not synchronized with the master.
- C. port 7 is used the HA heartbeat on all devices in the cluster.
- D. The HA management IP is 169.254.0.2.
正解: B,C
質問 15
Whendoes a RADIUS server send an Access-Challenge packet?
- A. The user account is not found in the server.
- B. The server does not have the user credentials yet.
- C. The user credentials are wrong.
- D. The server requires more information from the user, such as the token code for two-factor authentication.
正解: D
質問 16
An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage. However, after the changes, one network application started to have problems. During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before the arrival of the SYN/ACKs. When the SYN/ACK packets arrive to the FortiGate, the unit has already deleted the respective sessions. Which TCP session timer must be increased to fix this problem?
- A. TCP half close.
- B. TCP half open.
- C. TCP time wait.
- D. TCP session time to live.
正解: B
解説:
http://docs-legacy.fortinet.com/fos40hlp/43prev/wwhelp/wwhimpl/common/html/wwhelp.htm?context=fgt&file=CLI_get_Commands.58.25.html The tcp-halfopen-timer controls for how long, after a SYN packet, a session without SYN/ACK remains in the table.
The tcp-halfclose-timer controls for how long, after a FIN packet, a session without FIN/ACK remains in the table.
The tcp-timewait-timer controls for how long, after a FIN/ACK packet, a session remains in the table. A closed session remains in the session table for a few seconds more to allow any out-of-sequence packet.
質問 17
Examine the output of the 'get router info ospf neighbor' command shown in the exhibit; then answer the question below.
Which statements are true regarding the output in the exhibit? (Choose two.)
- A. The local FortiGate is the backup designated router for the wan1 network.
- B. The interface ToRemote is OSPF network type point-to-point.
- C. The OSPF router with the ID 0.0.0.2 is the designated router for the ToRemote network.
- D. The OSPF routers with the IDs 0.0.0.69 and 0.0.0.117 are both designated routers for the wan1 network.
正解: A,B
解説:
https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/13685-13.html
質問 18
View the exhibit, which contains the output of diagnose sys session stat, and then answer the question below.
Which statements are correct regarding the output shown? (Choose two.)
- A. All the sessions in the session table are TCP sessions.
- B. No sessions have been deleted because of memory pages exhaustion.
- C. There are 166 TCP sessions waiting to complete the three-way handshake.
- D. There are 0 ephemeral sessions.
正解: B,D
解説:
https://kb.fortinet.com/kb/documentLink.do?externalID=FD40578
質問 19
Examine the partial output fromtwo web filter debug commands; then answer the question below:
Based on the above outputs, which is the FortiGuard web filter category for the web site www.fgt99.com?
- A. General organization.
- B. Information technology.
- C. Finance and banking
- D. Business.
正解: D
質問 20
View the exhibit, which contains a screenshot of some phase-1settings, and then answer the question below.
The VPN is up, and DPD packets are being exchanged between both IPsec gateways; however, traffic cannot pass through the tunnel. To diagnose, the administrator enters these CLI commands:
However, the IKE real time debug does not show any output. Why?
- A. The log-filter setting was set incorrectly. The VPN's traffic does not match thisfilter.
- B. The debug output shows phases 1 and 2 negotiations only. Once the tunnel is up, it does not show any more output.
- C. The debug shows only error messages. If there is no output, then the tunnel is operating normally.
- D. The debug output shows phase 1 negotiation only. After that, the administrator must enable the following real time debug: diagnose debug application ipsec -1.
正解: A
質問 21
Refer to the exhibit, which contains the output of a BGP debug command.
Which statement about the exhibit is true?
- A. The local router has not established a TCP session with 100.64.3.1.
- B. The local router BGP state is OpenConfirm with the 10.127.0.75 peer.
- C. Since the counters were last reset, the 10.200.3.1 peer has never been down.
- D. The local router has received a total of three BGPprefixes from all peers.
正解: A
質問 22
Examine the output of the 'diagnose debug rating' command shown in the exhibit; then answer the question below.
Which statement are true regarding the output in the exhibit? (Choose two.)
- A. The TZ value represents the delta between each FortiGuard server's time zone and the FortiGate's time zone.
- B. A server's round trip delay (RTT) is not used to calculate its weight.
- C. FortiGate will send the FortiGuard queries to the server withhighest weight.
- D. There are three FortiGuard serversthat are not responding to the queries sent by the FortiGate.
正解: A,C
質問 23
Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.)
- A. UTM failopen
- B. AV failopen
- C. IPS failopen
- D. mem failopen
正解: B,C
質問 24
View the exhibit, which contains the output of a BGP debug command, and then answer the question below.
Which of the following statements about the exhibit are true? (Choose two.)
- A. The local router has not established a TCP session with 100.64.3.1.
- B. The local router's BGP state is Established with the 10.125.0.60 peer.
- C. The local router has received a total of three BGP prefixes from all peers.
- D. Since the counters were last reset; the 10.200.3.1 peer has never been down.
正解: A,B
質問 25
Examine the following partial output from a sniffer command; then answer the question below.
What is the meaning of the packets dropped counter at the end of the sniffer?
- A. Number of packets that didn't match the sniffer filter.
- B. Number of total packets dropped by the FortiGate.
- C. Number of packets that matched the sniffer filter but could not be captured by the sniffer.
- D. Number of packets that matched the sniffer filter and were dropped by the FortiGate.
正解: C
解説:
https://kb.fortinet.com/kb/documentLink.do?externalID=11655
質問 26
View the exhibit, which contains a partial web filter profile configuration, and then answer the question below.
Which action will FortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?
- A. FortiGate will block the connection as an invalid URL.
- B. FortiGate will block the connection based on the URL Filter configuration.
- C. FortiGate will allow the connection based on the FortiGuard category based filter configuration.
- D. FortiGate will exempt the connection based on the Web Content Filter configuration.
正解: B
解説:
fortigate does it in order Static URL -> FortiGuard - > Content -> Advanced (java, cookie removal..) so block it in first step
質問 27
Which two statements about bulk configuration changes made using FortiManager CLI scripts are correct? (Choose two.)
- A. When run on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate device.
- B. When run on the All FortiGate in ADOM, changes are automatically installed without the creation of a new revision history.
- C. When run on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate device.
- D. When run on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.
正解: A,D
質問 28
Refer to the exhibit, which contains the partial output of a diagnose command.
Based on the output, which two statements are correct? (Choose two.)
- A. DPD is disabled.
- B. Remote gateway IP is 10.200.4.1.
- C. Anti-replay is enabled.
- D. Quick mode selectors are disabled.
正解: B,C
質問 29
Refer to the exhibit, which contains partial outputs from two routing debug commands.
Why is the port2 default route not in the second command's output?
- A. It has a higher distance than the default route using port1.
- B. It has a lower priority value than the default route using port1.
- C. It is disabled in the FortiGate configuration.
- D. It has a higher priority value than the default route using port1.
正解: A
質問 30
......
Fortinet NSE 7 - Enterprise Firewall 6.4認証サンプル問題と練習試験：https://www.passtest.jp/Fortinet/NSE7_EFW-6.4-shiken.html
リアルな試験問題と解答でFortinet NSE7_EFW-6.4問題集が待ってます：https://drive.google.com/open?id=1GnPRg8-9_KgsWzQY9szv3hFXHTnHrX8H