NSE7_EFW-7.0リアルな試験問題NSE7_EFW-7.0練習問題集
厳密検証されたNSE7_EFW-7.0試験問題集と解答で無料提供のNSE7_EFW-7.0問題と正解付き
Fortinet NSE7_EFW-7.0試験は、ネットワークセキュリティの分野での専門家のスキルと知識をテストする厳しい認定試験です。この試験に合格することは、企業ネットワークをサイバー脅威から保護するためにFortinet NSE 7 - Enterprise Firewall 7.0を使用する高度な専門知識を証明する重要な成果です。
Fortinet NSE7_EFW-7.0試験は、ファイアウォールポリシー、NAT、IPsec VPN、SSL VPN、高可用性、およびFortiGateトラブルシューティングなどのトピックを扱います。この試験は、様々なシナリオでFortinetの企業向けファイアウォールソリューションを構成および管理する能力をテストするように設計されています。この試験に合格することは、候補者が複雑なネットワーク環境でFortinetの企業向けファイアウォールソリューションを実装および管理するために必要な知識とスキルを持っていることを証明します。この認定は業界で高く評価され、ネットワークセキュリティ専門家がキャリアを前進させ、収益性を高めるのに役立ちます。
質問 # 49
Refer to the exhibit, which contains partial output from an IKE real-time debug.
Based on the debug output, which phase 1 setting is enabled in the configuration of this VPN?
- A. auto-discovery-shortcut
- B. auto-discovery-sender
- C. auto-discovery-receiver
- D. auto-discovery-forwarder
正解：B
質問 # 50
Which of the following statements are true regarding the SIP session helper and the SIP application layer gateway (ALG)? (Choose three.)
- A. SIP ALG supports SIP over IPv6; SIP helper does not.
- B. SIP helper supports SIP over TCP and UDP; SIP ALG supports only SIP over UDP.
- C. SIP ALG supports SIP HA failover; SIP helper does not.
- D. SIP session helper runs in the kernel; SIP ALG runs as a user space process.
- E. SIP ALG can create expected sessions for media traffic; SIP helper does not.
正解：A、C、D
質問 # 51
View the exhibit, which contains the output of a diagnose command, and then answer the question below.
What statements are correct regarding the output? (Choose two.)
- A. This is an expected session created by an application control profile.
- B. Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next-hop IP address 10.200.1.1.
- C. This is an expected session created by a session helper.
- D. Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next-hop IP address 10.0.1.10.
正解：B、C
質問 # 52
View the exhibit, which contains the output of a debug command, and then answer the question below.
Which one of the following statements about this FortiGate is correct?
- A. It is currently in proxy conserve mode because of high memory usage.
- B. It is currently in memory conserve mode because of high memory usage.
- C. It is currently in extreme conserve mode because of high memory usage.
- D. It is currently in system conserve mode because of high CPU usage.
正解：B
質問 # 53
Four FortiGate devices configured for OSPF connected to the same broadcast domain. The first unit is elected as the designated router. The second unit is elected as the backup designated router.
Under normal operation, how many OSPF full adjacencies are formed to each of the other two units?
- A. 0
- B. 1
- C. 2
- D. 3
正解：B
質問 # 54
View the following FortiGate configuration.
All traffic to the Internet currently egresses from port1. The exhibit shows partial session information for Internet traffic from a user on the internal network:
If the priority on route ID 1 were changed from 5 to 20, what would happen to traffic matching that user's session?
- A. The session would be deleted, so the client would need to start a new session.
- B. The session would remain in the session table, and its traffic would start to egress from port2.
- C. The session would remain in the session table, and its traffic would still egress from port1.
- D. The session would remain in the session table, but its traffic would now egress from both port1 and port2.
正解：C
解説：
http://kb.fortinet.com/kb/documentLink.do?externalID=FD40943
質問 # 55
Refer to the exhibit, which contains the partial output of the get vpn ipsec tunnel details command.
Based on the output, which two statements are correct? (Choose two.)
- A. Anti-replay is enabled.
- B. Different SPI values are a result of auto-negotiation being disabled for phase 2 selectors.
- C. The npu_flag for this tunnel is 03.
- D. The npu_flag for this tunnel is 02.
正解：A、C
質問 # 56
View the exhibit, which contains the output of a real-time debug, and then answer the question below.
Which of the following statements is true regarding this output? (Choose two.)
- A. This web request was inspected using the root web filter profile.
- B. FortiGate found the requested URL in its local cache.
- C. The requested URL belongs to category ID 52.
- D. The web request was allowed by FortiGate.
正解：B、C
質問 # 57
Refer to the exhibit, which contains the partial output of the get vpn ipsec tunnel details command.
Based on the output, which two statements are correct? (Choose two.)
- A. Phase 2 authentication is set to sha1 on both sides.
- B. Hub2Spoke1 is configured on interface wan2.
- C. Hub2Spoke1 is a policy-based VPN.
- D. Anti-replay is disabled.
正解：A、B
質問 # 58
The logs in a FSSO collector agent (CA) are showing the following error:
failed to connect to registry: PIKA1026 (192.168.12.232)
What can be the reason for this error?
- A. The CA cannot resolve the name of the workstation.
- B. The FortiGate cannot resolve the name of the workstation.
- C. The CA cannot reach the FortiGate with the IP address 192.168.12.232.
- D. The remote registry service is not running in the workstation 192.168.12.232.
正解：D
解説：
https://kb.fortinet.com/kb/documentLink.do?externalID=FD30548
質問 # 59
View the exhibit, which contains the partial output of a diagnose command, and then answer the question below.
Based on the output, which of the following statements is correct?
- A. Quick mode selectors are disabled.
- B. Anti-reply is enabled.
- C. Remote gateway IP is 10.200.5.1.
- D. DPD is disabled.
正解：B
質問 # 60
Examine the output of the 'get router info ospf interface' command shown in the exhibit; then answer the question below.
Which statements are true regarding the above output? (Choose two.)
- A. Two OSPF routers are down in the port4 network.
- B. The port4 interface is connected to the OSPF backbone area.
- C. There are at least 5 OSPF routers connected to the port4 network.
- D. The local FortiGate has been elected as the OSPF backup designated router.
正解：B、C
解説：
on BROADCAST network there are 4 neighbors, among which 1*DR +1*BDR. So our FG has 4 neighbors, but create adjacency only with 2 (with DR and BDR). 2 neighbors DRother (not down).
質問 # 61
View the exhibit, which contains the output of a diagnose command, and then answer the question below.
What statements are correct regarding the output? (Choose two.)
- A. This is an expected session created by an application control profile.
- B. Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next-hop IP address 10.200.1.1.
- C. This is an expected session created by a session helper.
- D. Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next-hop IP address 10.0.1.10.
正解：B、C
質問 # 62
View the exhibit, which contains the output of diagnose sys session list, and then answer the question below.
If the HA ID for the primary unit is zero (0), which statement is correct regarding the output?
- A. This session is synced with the slave unit.
- B. This session is for HA heartbeat traffic.
- C. This session cannot be synced with the slave unit.
- D. The inspection of this session has been offloaded to the slave unit.
正解：A
質問 # 63
In which two states is a given session categorized as ephemeral? (Choose two.)
- A. A TCP session waiting for FIN ACK.
- B. A UDP session with packets sent and received.
- C. A TCP session waiting to complete the three-way handshake.
- D. A UDP session with only one packet received.
正解：C、D
質問 # 64
Refer to the exhibit, which shows a session entry .
Which statement about this session is true?
- A. It is an ICMP session from 10.1.10.10 to 10.200.5. 1.
- B. It is an ICMP session from 10.1.10.10 to 10.200.1.1.
- C. It is a TCP session in close_wait state, from 10. l. 10.10 to 10.200.1.1.
- D. It is a TCP session in the established state, from 10.1.10.10 to 10.200.5.1.
正解：A
質問 # 65
Refer to the exhibit, which shows a partial web filter profile configuration.
Which action will FortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?
- A. FortiGate will block the connection as an invalid URL.
- B. FortiGate will allow the connection, based on the URL Filter configuration.
- C. FortiGate will exempt the connection, based on the Web Content Filter configuration.
- D. FortiGate will block the connection, based on the FortiGuard category based filter configuration.
正解：D
解説：
Enterprise_Firewall_7.0_Study_Guide-Online.pdf p 351 url filter -> FortiGuard Web Filter -> Web Content Filter -> Advanced Filter Options Allow -> Block
質問 # 66
A FortiGate is rebooting unexpectedly without any apparent reason .
What troubleshooting tools could an administrator use to get more information about the problem? (Choose two.)
- A. Policy monitor.
- B. Crashlogs.
- C. Firewall monitor.
- D. Logs.
正解：B、D
質問 # 67
An administrator has configured a FortiGate device with two VDOMs: root and internal. The administrator has also created and inter-VDOM link that connects both VDOMs. The objective is to have each VDOM advertise some routes to the other VDOM via OSPF through the inter-VDOM link .
What OSPF configuration settings must match in both VDOMs to have the OSPF adjacency successfully forming? (Choose three.)
- A. OSPF interface area.
- B. OSPF interface cost.
- C. Interface subnet mask.
- D. OSPF interface MTU.
- E. Router ID.
正解：A、C、D
質問 # 68
In which two states is a given session categorized as ephemeral? (Choose two.)
- A. A TCP session waiting for the SYN ACK
- B. A TCP session waiting for FIN ACK
- C. A UDP session with packets sent and received
- D. A UDP session with only one packet received
正解：A、D
質問 # 69
Refer to the exhibit, which contains the output of diagnose sys session list.
If the HA ID for the primary unit is zero (0), which statement about the output is true?
- A. The master unit is processing this traffic.
- B. This session is for HA heartbeat traffic.
- C. This session cannot be synced with the slave unit.
- D. The inspection of this session has been offloaded to the slave unit.
正解：A
質問 # 70
Refer to the exhibit, which shows the output of a BGP debug command.
What can be concluded about the router in this scenario?
- A. The router 100.64.3.1 needs to update the local AS number in its BGP configuration in order to bring up the BGP session with the local router.
- B. All of the neighbors displayed are part of a single BGP configuration on the local router with the neighbor-range set to a value of 4.
- C. The BGP session with peer 10.127.0.75 is up.
- D. The State/PfxRcd for neighbor 100.64.3.1 will not change until an administrator on the local router adjusts the inbound route filtering so that prefixes received can be added to the RIB.
正解：C
質問 # 71
Refer to the exhibit, which contains a TCL script configuration on FortiManager.
An administrator has configured the TCL script on FortiManager, but the TCL script failed to apply any changes to the managed device after being run.
Why did the TCL script fail to make any changes to the managed device?
- A. The TCL script must start with tinclude <>.
- B. Changes to an interface configuration can be made only by a CLI script.
- C. Incomplete commands are ignored in TCL scripts.
- D. The TCL command run_cmd has not been created.
正解：D
質問 # 72
Refer to the exhibit, which shows the output of a diagnose command.
What can be concluded about the debug output in this scenario?
- A. There is a natural correlation between the value in the Packets field and the value in the Weight field.
- B. Servers with a negative TZ value are less preferred for rating requests.
- C. FortiGate used 64.26.151.37 as the initial server to validate its contract.
- D. The first server provided to FortiGate when it performed a DNS query looking for a list of rating servers, was 121.111.236.179.
正解：A
質問 # 73
......
Fortinet NSE7_EFW-7.0試験は、グローバルに認知されているベンダーニュートラルの認定試験です。エンタープライズファイアウォール管理の専門家としてのキャリアの展望を高め、専門知識を証明するために必要な資格です。認定プロフェッショナルは、セキュリティ脅威を特定し、軽減するための十分な装備を持ち、セキュリティポリシーを実装し、セキュリティインシデントに対応することができます。
無料でゲット！高評価Fortinet NSE7_EFW-7.0試験問題集を今すぐダウンロード！：https://www.passtest.jp/Fortinet/NSE7_EFW-7.0-shiken.html
あなたを合格させるNSE7_EFW-7.0無料最新問題集でFortinet練習テストしよう：https://drive.google.com/open?id=1LtfeZ9keZkVMon_TMyvthHLMtkzM2cRN