NSE7_EFW-7.2試験無料問題集（82題）「Fortinet NSE 7

出題：1

Which two features are true regarding IPS hardware acceleration? (Choose two.)

A. set np-access-mode basic will provide last path for IPS inspected traffic

B. Network processors provide pre-IPS anomaly filtering and logging

C. FortiGate does not support IPSA if the cp-accel-mode is configured as none.

D. cp-accel-iaode advanced option is available only on FortiGate devices that have one or more CP8 processors

正解：A,D 解答を投票する

出題：2

Exhibit.

Refer to exhibit, which shows a central management configuration
Which server will FortiGate choose for web filler rating requests if 10.0.1.240 is experiencing an outage?

A. 10.0.1.243

B. 10.0.1.242

C. 10.0.1.244

D. Public FortiGuard servers

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

What are two functions of automation stitches? (Choose two.)

A. Automation stitches can be created to run diagnostic commands and email the results when CPU or memory usage exceeds specified thresholds.

B. An automation stitch configured to execute actions in parallel can be set to insert a specific delay between actions.

C. Automation stitches can be configured on any FortiGate device in a Security Fabric environment.

D. An automation stitch configured to execute actions sequentially can take parameters from previous actions as input for the current action.

正解：A,D 解答を投票する

出題：4

Refer to the exhibit, which contains a partial OSPF configuration.

What can you conclude from this output?

A. The router sends grace LSAs before it restarts.

B. FortiGate restarts if the topology changes.

C. Neighbors maintain communication with the restarting router.

D. The restarting router sends gratuitous ARP for 30 seconds.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Refer to the exhibits, which show the configurations of two address objects from the same FortiGate.

Why can you modify the Engineering address object, but not the Finance address object?

A. Another user is editing the Finance address object in workspace mode.

B. FortiGate joined the Security Fabric and the Finance address object was configured on the root FortiGate.

C. You have read-only access.

D. FortiGate is registered on FortiManager.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Exhibit.

Refer to the exhibit, which contains the partial interface configuration of two FortiGate devices.
Which two conclusions can you draw from this con figuration? (Choose two)

A. The VRRP domain uses the physical MAC address of the primary FortiGate

B. On failover new primary device uses the same MAC address as the old primary

C. 10.1.5.254 is the default gateway of the internal network

D. By default FortiGate B is the primary virtual router

正解：B,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

An administrator is configuring two FortiGate devices in an HA cluster. While configuring the devices, the administrator issues the following commands on both HA cluster members:

In which two ways do these commands impact the HA cluster? (Choose two.)

A. They force both HA devices for remote link monitoring to detect an issue in the forwarding path.

B. They force the former primary to send gratuitous ARP packets when the failover happens to indicate that the virtual MAC address is now using a different device.

C. They force the switches to update their MAC forwarding tables, when failover happens.

D. They force the former primary to shut down all ts interfaces for one second when failover happens, excluding the heartbeat and reserved management interfaces.

正解：B,D 解答を投票する

出題：8

Winch two statements about ADVPN are true? (Choose two)

A. Routing is configured by enabling add-advpn-route

B. auto-discovery receiver must be set to enable on the Spokes.

C. lt supports NAI for on-demand tunnels

D. Spoke to-spoke traffic never goes through the hub

正解：B,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

NSE7_EFW-7.2試験無料問題集「Fortinet NSE 7 - Enterprise Firewall 7.2 認定」