최신 NSE7_EFW-6.4 무료덤프 - Fortinet NSE 7

문제1

Which two tasks are automated using the Install Wizard on FortiManager? (Choose two.)

A. Add devices to FortiManager.

B. Install configuration changes to managed devices.

C. Import interface mappings from managed devices.

D. Preview pending configuration changes for managed devices.

E. Import policy packages from managed devices.

정답: B,D

설명: (DumpTOP 회원만 볼 수 있음)

문제2

What configuration changes can reduce the memory utilization in a FortiGate? (Choose two.)

A. Increase the TCP session timers.

B. Increase the FortiGuard cache time to live.

C. Reduce the maximum file size to inspect.

D. Reduce the session time to live.

정답: C,D

문제3

Examine the output of the 'diagnose ips anomaly list' command shown in the exhibit; then answer the question below.

Which IP addresses are included in the output of this command?

A. Those whose traffic was detected as an anomaly by an IPS sensor.

B. Those whose traffic matches an IPS sensor.

C. Those whose traffic matches a DoS policy.

D. Those whose traffic exceeded a threshold of a matching DoS policy.

정답: C

문제4

Two independent FortiGate HA clusters are connected to the same broadcast domain. The administrator has reported that both clusters are using the same HA virtual MAC address. This creates a duplicated MAC address problem in the network. What HA setting must be changed in one of the HA clusters to fix the problem?

A. Gratuitous ARPs.

B. Session pickup.

C. Group ID.

D. Group name.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제5

View the exhibit, which contains the output of a web diagnose command, and then answer the question below.

Which one of the following statements explains why the cache statistics are all zeros?

A. The administrator has reallocated the cache memory to a separate process.

B. FortiGate is using a flow-based web filter and the cache applies only to proxy-based inspection.

C. There are no users making web requests.

D. The FortiGuard web filter cache is disabled in the FortiGate's configuration.

정답: D

문제6

View the exhibit, which contains the output of get sys ha status, and then answer the question below.

Which statements are correct regarding the output? (Choose two.)

A. The HA management IP is 169.254.0.2.

B. port 7 is used the HA heartbeat on all devices in the cluster.

C. The slave configuration is not synchronized with the master.

D. Master is selected because it is the only device in the cluster.

정답: B,C

문제7

Which two statements about bulk configuration changes made using FortiManager CLI scripts are correct? (Choose two.)

A. When run on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate device.

B. When run on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.

C. When run on the All FortiGate in ADOM, changes are automatically installed without the creation of a new revision history.

D. When run on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate device.

정답: B,D

문제8

An LDAP user cannot authenticate against a FortiGate device. Examine the real time debug output shown in the exhibit when the user attempted the authentication; then answer the question below.

Based on the output in the exhibit, what can cause this authentication problem?

A. User student is using a wrong password.

B. The FortiGate has been configured with the wrong password for the LDAP administrator.

C. The FortiGate has been configured with the wrong authentication schema.

D. User student is not found in the LDAP server.

정답: D

문제9

Examine the following routing table and BGP configuration; then answer the question below.

TheBGP connection is up, but the local peer is NOT advertising the prefix 192.168.1.0/24. Which configuration change will make the local peer advertise this prefix?

A. Enable the redistribution of static routers into BGP.

B. Enable the setting ebgp-multipath.

C. Disable the setting network-import-check.

D. Enable the redistribution of connected routers into BGP.

정답: C

문제10

Examine the following partial output from two system debug commands; then answer the question below.

Which of the following statements are true regarding the above outputs? (Choose two.)

A. The Cached value is always the Active value plus the Inactive value

B. Kernel indirectly accesses the low memory (LowTotal) through memory paging

C. The unit is running a 32-bit FortiOS

D. The unit is in kernel conserve mode

정답: A,C

최신 NSE7_EFW-6.4 무료덤프 - Fortinet NSE 7 - Enterprise Firewall 6.4

우리와 연락하기

유용한 링크

최신 업데이트