FCSS_EFW_AD-7.4試験無料問題集（78題）「Fortinet FCSS - Enterprise Firewall 7.4 Administrator 認定」

出題：1

An administrator needs to install an IPS profile without triggering false positives that can impact applications and cause problems with the user's normal traffic flow. Which action can the administrator take to prevent false positives on IPS analysis?

A. Use an IPS profile with action monitor, however, the administrator must be aware that this can compromise network integrity.

B. Enable Scan Outgoing Connections to avoid clicking suspicious links or attachments that can deliver botnet malware and create false positives.

C. Use the IPS profile extension to select an operating system, protocol, and application for all the network internal services and users to prevent false positives.

D. Install missing or expired SSUTLS certificates on the client PC to prevent expected false positives.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Refer to the exhibit, which shows a revision history window in the FortiManager device layer.

The IT team is trying to identify the administrator responsible for the most recent update in the FortiGate device database.
Which conclusion can you draw about this scenario?

A. This retrieved process was automatically triggered by a Remote FortiGate Directly (via CLI) script.

B. The user script_manager is an API user from the Fortinet Developer Network (FDN) retrieving a configuration.

C. To identify the user who created the event, check it on the Configuration and Installation widget on FortiGate within the FortiManager device layer.

D. Find the user in the FortiManager system logs and use the type=script command to find the administrator user in the user field.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Refer to the exhibit, which shows information about an OSPF interface of hub router NGFW-1.

How would you change the interface state of NGFW.1 to a Designated router, if the spoke routers have the default OSPF parameters?

A. Change the network type to point-to-multipoint

B. Change the router ID to 0.0.0.95

C. Change the router ID to 0.0.0.65

D. Change the router priority to 200

正解：D 解答を投票する

出題：4

Refer to the exhibits. The exhibits show a network topology, a firewall policy, and an SSL/SSH inspection profile configuration.

Why is FortiGate unable to detect HTTPS attacks on firewall policy ID 3 targeting the Linux server?

A. The administrator must enable HTTPS in the protocol port mapping of the deep- inspection SSL/SSH inspection profile.

B. The administrator must enable cipher suites in the SSL/SSH inspection profile to decrypt the message.

C. The administrator must set the policy to inspection mode to analyze the HTTPS packets as expected.

D. The administrator must enable SSL inspection of the SSL server and upload the certificate of the Linux server website to the SSL/SSH inspection profile.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Refer to the exhibit, which shows the packet capture output of a three-way handshake between FortiGate and FortiManager Cloud.

What two conclusions can you draw from the exhibit? (Choose two.)

A. If the TLS handshake contains 17 cipher suites it means the TLS version must be 1.0 on this three- way handshake.

B. FortiGate will receive a certificate that supports multiple domains because FortiManager operates in a cloud computing environment.

C. The wildcard for the domain *.fortinet-ca2.support.fortinet.com must be supported by FortiManager Cloud.

D. FortiGate is connecting to the same IP server and will receive an independent certificate for its connection between FortiGate and FortiManager Cloud.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

An administrator must improve the resiliency of a link by minimizing data loss within the enterprise network that has full path redundancy.
What should the administrator enable on the FortiGate devices that use BGP as dynamic routing protocol between two separate autonomous systems? (Choose two.)

A. graceful-restart

B. bfd

C. ibgp-multipath

D. route-reflector-client

正解：A,B 解答を投票する

出題：7

Refer to the exhibit, which shows an enterprise network connected to an internet service provider.

The administrator must configure the BGP section of FortiGate A to give internet access to the enterprise network.
Which command must the administrator use to establish a connection with the internet service provider?

A. config redistribute bgp

B. config redistribute ospf

C. config neighbor

D. config router route-map

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

Refer to the exhibit, which shows an OSPF network.

Which types of link-state advertisements (LSA) will NGFW-1 send, if it is a backup designated router (BDR)?

A. NGFW-1 will send type 1 and type 5 LSAs.

B. NGFW-1 will send type 1 and type 3 LSAs.

C. NGFW-1 will send type 1 and type 2 LSAs.

D. NGFW-1 will send type 1 and type 4 LSAs.

正解：B 解答を投票する

FCSS_EFW_AD-7.4試験無料問題集「Fortinet FCSS - Enterprise Firewall 7.4 Administrator 認定」