NSE7_EFW-6.4試験無料問題集（124題）「Fortinet NSE 7

出題：1

Which configuration can be used to reduce the number of BGP sessions in an IBGP network?

A. Neighbor group

B. Route reflector

C. Next-hop-self

D. Neighbor range

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Which two statements about the Security Fabric are true? (Choose two.)

A. All FortiGate devices in the Security Fabric must have bidirectional FortiTelemetry connectivity.

B. FortiGate uses FortiTelemetry protocol to communicate with FortiAnalyzer.

C. Only the root FortiGate collects network information and forwards it to FortiAnalyzer.

D. Branch FortiGate devices must be configured first.

正解：A,B 解答を投票する

出題：3

Which the following events can trigger the election of a new primary unit in a HA cluster? (Choose two.)

A. The FortiGuard license for the primary unit is updated.

B. One of the monitored interfaces in the primary unit is disconnected.

C. A secondary unit is removed from the HA cluster.

D. Primary unit stops sending HA heartbeat keepalives.

正解：B,D 解答を投票する

出題：4

Examine the output from the 'diagnose vpn tunnel list' command shown in the exhibit; then answer the question below.

Which command can be used to sniffer the ESP traffic for the VPN DialUP_0?

A. diagnose sniffer packet any 'port 500'

B. diagnose sniffer packet any 'port 4500'

C. diagnose sniffer packet any 'host 10.0.10.10'

D. diagnose sniffer packet any 'esp'

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Examine the output of the 'get router info ospf interface' command shown in the exhibit; then answer the question below.

Which statements are true regarding the above output? (Choose two.)

A. The local FortiGate has been elected as the OSPF backup designated router.

B. The port4 interface is connected to the OSPF backbone area.

C. There are at least 5 OSPF routers connected to the port4 network.

D. Two OSPF routers are down in the port4 network.

正解：B,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

An administrator has configured a dial-up IPsec VPN with one phase 2, extended authentication (XAuth) and IKE mode configuration. The administrator has also enabled the IKE real time debug:
diagnose debug application ike-1
diagnose debug enable
In which order is each step and phase displayed in the debug output each time a new dial-up user is connecting to the VPN?

A. Phase1; XAuth; IKE mode configuration; phase2.

B. Phase1; IKE mode configuration; XAuth; phase 2.

C. Phase1; IKE mode configuration; phase 2; XAuth.

D. Phase1; XAuth; phase 2; IKE mode configuration.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Examine the output from the BGP real time debug shown in the exhibit, then the answer the question below:

Which statements are true regarding the output in the exhibit? (Choose two.)

A. The state of the remote BGP peer is OpenConfirm.

B. BGP peers have successfully interchanged Open and Keepalive messages.

C. The state of the remote BGP peer will go to Connect after it confirms the received prefixes.

D. Local BGP peer received a prefix for a default route.

正解：B,D 解答を投票する

出題：8

Which two statements about FortiManager is true when it is deployed as a local FDS? (Choose two.)

A. It can be configured as an update server, or a rating server, but not both.

B. It supports rating requests from both managed and unmanaged devices.

C. It caches available firmware updates for unmanaged devices.

D. It provides VM license validation services.

正解：B,D 解答を投票する

出題：9

Refer to the exhibit, which shows a partial routing table.

Assuming all the appropriate firewall policies are configured, which two pings will FortiGate route? (Choose two.)

A. Source IPaddress: 10.72.3.52. Destination IP address: 10.1.0.254

B. Source IPaddress: 10.10.4.24, Destination IPaddress: 10.72.3.20

C. Source IPaddress: 10.73.9.10, Destination IPaddress: 10.72.3.15

D. Source IP address: 10.1.0.10. Destination IP address: 10.64.1.52

正解：A,D 解答を投票する

出題：10

What is the purpose of an internal segmentation firewall (ISFW)?

A. It splits the network into multiple security segments to minimize the impact of breaches.

B. It inspects incoming traffic to protect services in the corporate DMZ.

C. It is an all-in-one security appliance that is placed at remote sites to extend the enterprise network.

D. It is the first line of defense at the network perimeter.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

NSE7_EFW-6.4試験無料問題集「Fortinet NSE 7 - Enterprise Firewall 6.4 認定」