최신 NSE7_EFW-6.4 무료덤프 - Fortinet NSE 7

문제1

In which two states is a given session categorized as ephemeral? (Choose two.)

A. A UDP session with only one packet received.

B. A TCP session waiting to complete the three-way handshake.

C. A TCP session waiting for FIN ACK.

D. A UDP session with packets sent and received.

정답: A,B

문제2

View the exhibit, which contains the output of a debug command, and then answer the question below.

Which one of the following statements about this FortiGate is correct?

A. It is currently in memory conserve mode because of high memory usage.

B. It is currently in extreme conserve mode because of high memory usage.

C. It is currently in system conserve mode because of high CPU usage.

D. It is currently in proxy conserve mode because of high memory usage.

정답: A

문제3

Which statement about memory conserve mode is true?

A. A FortiGate starts dropping all the new and old sessions when the configured memory use threshold reaches extreme.

B. A FortiGate exits conserve mode when the configured memory use threshold reaches yellow.

C. A FortiGate enters conserve mode when the configured memory use threshold reaches red

D. A FortiGate starts dropping new sessions when the configured memory use threshold reaches red

정답: C

문제4

Refer to the exhibit, which contains partial output from an IKE real-time debug.

Which two statements about this debug output are correct? (Choose two.)

A. The negotiation is using AES128 encryption with CBC hash.

B. The remote gateway IP address is 10.0.0.1.

C. It shows a phase 1 negotiation.

D. The initiator provided remote as its IPsec peer ID.

정답: C,D

문제5

View the exhibit, which contains the output of a real-time debug, Which statement about this output is true?

Which of the following statements is true regarding this output?

A. The requested URL belongs to category ID 255.

B. FortiGate found the requested URL in its local cache.

C. The server hostname Is training, fortinet.com.

D. This web request was inspected using the ftgd-allow web filler profile.

정답: B

문제6

An administrator is running the following sniffer in a FortiGate:
diagnose sniffer packet any "host 10.0.2.10" 2
What information is included in the output of the sniffer? (Choose two.)

A. IP payload.

B. Port names.

C. IP headers.

D. Ethernet headers.

정답: A,C

설명: (DumpTOP 회원만 볼 수 있음)

문제7

Examine the output of the 'diagnose ips anomaly list' command shown in the exhibit; then answer the question below.

Which IP addresses are included in the output of this command?

A. Those whose traffic was detected as an anomaly by an IPS sensor.

B. Those whose traffic matches an IPS sensor.

C. Those whose traffic matches a DoS policy.

D. Those whose traffic exceeded a threshold of a matching DoS policy.

정답: C

문제8

Examine the output of the 'get router info ospf interface' command shown in the exhibit; then answer the question below.

Which statements are true regarding the above output? (Choose two.)

A. The local FortiGate has been elected as the OSPF backup designated router.

B. The port4 interface is connected to the OSPF backbone area.

C. Two OSPF routers are down in the port4 network.

D. There are at least 5 OSPF routers connected to the port4 network.

정답: B,D

설명: (DumpTOP 회원만 볼 수 있음)

문제9

An administrator has enabled HA session synchronization in a HA cluster with two members. Which flag is added to a primary unit's session to indicate that it has been synchronized to the secondary unit?

A. synced

B. nds.

C. redir.

D. dirty.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제10

Refer to the exhibit, which contains a TCL script configuration on FortiManager.
An administrator has configured the TCL script on FortiManager, but the TCL script failed to apply any changes to the managed device after being run.

Why did the TCL script fail to make any changes to the managed device?

A. Incomplete commands are ignored in TCL scripts.

B. The TCL command run_cmd has not been created.

C. Changes to an interface configuration can be made only by a CLI script.

D. The TCL script must start with tinclude <>.

정답: B

최신 NSE7_EFW-6.4 무료덤프 - Fortinet NSE 7 - Enterprise Firewall 6.4

우리와 연락하기

유용한 링크

최신 업데이트