NSE7_EFW-6.4試験無料問題集（124題）「Fortinet NSE 7

出題：1

An LDAP user cannot authenticate against a FortiGate device. Examine the real time debug output shown in the exhibit when the user attempted the authentication; then answer the question below.

Based on the output in the exhibit, what can cause this authentication problem?

A. The FortiGate has been configured with the wrong password for the LDAP administrator.

B. User student is not found in the LDAP server.

C. User student is using a wrong password.

D. The FortiGate has been configured with the wrong authentication schema.

正解：B 解答を投票する

出題：2

Which of the following conditions must be met for a static route to be active in the routing table? (Choose three.)

A. The link health monitor (if configured) is up.

B. The outgoing interface is up.

C. The next-hop IP address belongs to one of the outgoing interface subnets.

D. The next-hop IP address is up.

E. There is no other route, to the same destination, with a higher distance.

正解：A,B,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Refer to the exhibit, which shows a session entry. Which statement about this session is true?

A. It is a TCP session in the established state, from 10.1.10.10 to 10.200.5.1.

B. It is an ICMP session from 10.1.10.10 to 10.200.5. 1.

C. It is an ICMP session from 10.1.10.10 to 10.200.1.1.

D. It is a TCP session in close_wait state, from 10. l. 10.10 to 10.200.1.1.

正解：B 解答を投票する

出題：4

View the exhibit, which contains the output of a diagnose command, and then answer the question below.

What statements are correct regarding the output? (Choose two.)

A. Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next-hop IP address 10.0.1.10.

B. This is an expected session created by a session helper.

C. Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next-hop IP address 10.200.1.1.

D. This is an expected session created by an application control profile.

正解：B,C 解答を投票する

出題：5

Examine the output of the 'diagnose sys session list expectation' command shown in the exhibit; than answer the question below.

Which statement is true regarding the session in the exhibit?

A. It is for traffic originated from the FortiGate.

B. It is for management traffic terminating at the FortiGate.

C. It was created by the FortiGate kernel to allow push updates from FotiGuard.

D. It was created by a session helper or ALG.

正解：D 解答を投票する

出題：6

An administrator cannot connect to the GIU of a FortiGate unit with the IP address 10.0.1.254. The administrator runs the debug flow while attempting the connection using HTTP. The output of the debug flow is shown in the exhibit:

Based on the error displayed by the debug flow, which are valid reasons for this problem? (Choose two.)

A. The packet is denied because of reverse path forwarding check.

B. HTTP administrative access is configured with a port number different than 80.

C. HTTP administrative access is disabled in the FortiGate interface with the IP address 10.0.1.254.

D. Redirection of HTTP to HTTPS administrative access is disabled.

正解：B,C 解答を投票する

出題：7

View the exhibit, which contains a partial output of an IKE real-time debug, and then answer the question below.

Based on the debug output, which phase-1 setting is enabled in the configuration of this VPN?

A. auto-discovery-shortcut

B. auto-discovery-forwarder

C. auto-discovery-receiver

D. auto-discovery-sender

正解：B 解答を投票する

出題：8

Examine the output from the 'diagnose vpn tunnel list' command shown in the exhibit; then answer the question below.

Which command can be used to sniffer the ESP traffic for the VPN DialUP_0?

A. diagnose sniffer packet any 'port 500'

B. diagnose sniffer packet any 'port 4500'

C. diagnose sniffer packet any 'host 10.0.10.10'

D. diagnose sniffer packet any 'esp'

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

Examine the partial output from two web filter debug commands; then answer the question below:

Based on the above outputs, which is the FortiGuard web filter category for the web site www.fgt99.com?

A. Business.

B. Finance and banking

C. General organization.

D. Information technology.

正解：A 解答を投票する

出題：10

View the exhibit, which contains the output of a debug command, and then answer the question below.

Which one of the following statements about this FortiGate is correct?

A. It is currently in memory conserve mode because of high memory usage.

B. It is currently in system conserve mode because of high CPU usage.

C. It is currently in extreme conserve mode because of high memory usage.

D. It is currently in proxy conserve mode because of high memory usage.

正解：A 解答を投票する

NSE7_EFW-6.4試験無料問題集「Fortinet NSE 7 - Enterprise Firewall 6.4 認定」