최신 NSE7_EFW-6.4 무료덤프 - Fortinet NSE 7

문제1

View the exhibit, which contains the output of get sys ha status, and then answer the question below.

Which statements are correct regarding the output? (Choose two.)

A. The HA management IP is 169.254.0.2.

B. port 7 is used the HA heartbeat on all devices in the cluster.

C. The slave configuration is not synchronized with the master.

D. Master is selected because it is the only device in the cluster.

정답: B,C

문제2

Which of the following statements is true regarding a FortiGate configured as an explicit web proxy?

A. FortiGate limits the number of simultaneous sessions per explicit web proxy user. This limit CANNOT be modified by the administrator.

B. FortiGate limits the number of workstations that authenticate using the same web proxy user credentials. This limit CANNOT be modified by the administrator.

C. FortiGate limits the number of simultaneous sessions per explicit web proxy user The limit CAN be modified by the administrator

D. FortiGate limits the total number of simultaneous explicit web proxy users.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제3

An LDAP user cannot authenticate against a FortiGate device. Examine the real time debug output shown in the exhibit when the user attempted the authentication; then answer the question below.

Based on the output in the exhibit, what can cause this authentication problem?

A. User student is using a wrong password.

B. The FortiGate has been configured with the wrong password for the LDAP administrator.

C. The FortiGate has been configured with the wrong authentication schema.

D. User student is not found in the LDAP server.

정답: D

문제4

View the exhibit, which contains the output of a diagnose command, and then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

A. FortiGate will probe 121.111.236.179 every fifteen minutes for a response.

B. Servers with a negative TZ value are experiencing a service outage.

C. Servers with the D flag are considered to be down.

D. FortiGate used 209.222.147.3 as the initial server to validate its contract.

정답: A,D

설명: (DumpTOP 회원만 볼 수 있음)

문제5

Examine the partial output from the IKE real time debug shown in the exhibit; then answer the question below.

Why didn't the tunnel come up?

A. The remote gateway's Phase-1 configuration does not match the local gateway's phase-1 configuration.

B. IKE mode configuration is not enabled in the remote IPsec gateway.

C. One IPsec gateway is using main mode, while the other IPsec gateway is using aggressive mode.

D. The remote gateway's Phase-2 configuration does not match the local gateway's phase-2 configuration.

정답: A

문제6

When does a RADIUS server send an Access-Challenge packet?

A. The server requires more information from the user, such as the token code for two-factor authentication.

B. The user account is not found in the server.

C. The user credentials are wrong.

D. The server does not have the user credentials yet.

정답: A

문제7

Refer to the exhibit, which contains the partial output of the get vpn ipsec tunnel details command.

Based on the output, which two statements are correct? (Choose two.)

A. Hub2Spoke1 is a policy-based VPN.

B. Phase 2 authentication is set to sha1 on both sides.

C. Anti-replay is disabled.

D. Hub2Spoke1 is configured on interface wan2.

정답: B,D

문제8

Examine the IPsec configuration shown in the exhibit; then answer the question below.

An administrator wants to monitor the VPN by enabling the IKE real time debug using these commands:
diagnose vpn ike log-filter src-addr4 10.0.10.1
diagnose debug application ike -1
diagnose debug enable
The VPN is currently up, there is no traffic crossing the tunnel and DPD packets are being interchanged between both IPsec gateways. However, the IKE real time debug does NOT show any output. Why isn't there any output?

A. The IKE real time debug shows error messages only. If it does not provide any output, it indicates that the tunnel is operating normally.

B. The IKE real time debug shows the phase 1 negotiation only. For information after that, the administrator must use the IPsec real time debug instead: diagnose debug application ipsec -1.

C. The log-filter setting is set incorrectly. The VPN's traffic does not match this filter.

D. The IKE real time shows the phases 1 and 2 negotiations only. It does not show any more output once the tunnel is up.

정답: C

문제9

Which of the following statements are correct regarding application layer test commands? (Choose two.)

A. Some of them can be used to restart an application.

B. They display real-time application debugs.

C. They are used to filter real-time debugs.

D. Some of them display statistics and configuration information about a feature or process.

정답: A,D

설명: (DumpTOP 회원만 볼 수 있음)

최신 NSE7_EFW-6.4 무료덤프 - Fortinet NSE 7 - Enterprise Firewall 6.4

우리와 연락하기

유용한 링크

최신 업데이트