NSE7_EFW-7.2試験無料問題集（58題）「Fortinet NSE 7

出題：1

Which two statements about IKE vision 2 are true? (Choose two.)

A. It exchanges a minimum of four messages to establish a secure tunnel

B. It supports the XAuth protocol.

C. It supports the extensible authentication protocol (EAP)

D. Phase 1 includes main mode

正解：A,C 解答を投票する

出題：2

Refer to the exhibit, which shows a network diagram.

Which protocol should you use to configure the FortiGate cluster?

A. FGSP

B. FGCP in active-passive mode

C. VRRP

D. FGCP in active-active mode

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Which two statements about IKE version 2 fragmentation are true? (Choose two.)

A. It is performed at the IP layer.

B. Only some IKE version 2 packets are considered fragmentable.

C. The reassembly timeout default value is 30 seconds.

D. The maximum number of IKE version 2 fragments is 128.

正解：B,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Exhibit.

Refer to exhibit, which shows a central management configuration
Which server will FortiGate choose for web filler rating requests if 10.0.1.240 is experiencing an outage?

A. 10.0.1.243

B. 10.0.1.242

C. 10.0.1.244

D. Public FortiGuard servers

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Which two statements about the neighbor-group command are true? (Choose two.)

A. It applies common settings in an OSPF area.

B. You can configure it on the GUI.

C. It is combined with the neighbor-range parameter.

D. You can apply it in Internal BGP (IBGP) and External BGP (EBGP).

正解：A,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Refer to the exhibit, which contains information about an IPsec VPN tunnel.

What two conclusions can you draw from the command output? (Choose two.)

A. The IKE version is 2.

B. Dead peer detection is set to enable.

C. Forward error correction in phase 2 is set to enable.

D. Both IPsec SAs are loaded on the kernel.

正解：A,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

NSE7_EFW-7.2試験無料問題集「Fortinet NSE 7 - Enterprise Firewall 7.2 認定」