최신 NSE7_EFW-6.4 무료덤프 - Fortinet NSE 7

문제1

A FortiGate is configured as an explicit web proxy. Clients using this web proxy are reposting DNS errors when accessing any website. The administrator executes the following debug commands and observes that the n-dns-timeout counter is increasing:

What should the administrator check to fix the problem?

A. The connectivity between the client workstations and the DNS server.

B. The connectivity between the FortiGate unit and the DNS server.

C. That DNS traffic from client workstations is allowed by the explicit web proxy policies.

D. That DNS service is enabled in the explicit web proxy interface.

정답: B

문제2

Refer to the exhibit, which contains the output of diagnose sys session list.

If the HA ID for the primary unit is zero (0), which statement about the output is true?

A. The master unit is processing this traffic.

B. This session cannot be synced with the slave unit.

C. This session is for HA heartbeat traffic.

D. The inspection of this session has been offloaded to the slave unit.

정답: A

문제3

Examine the output of the 'get router info bgp summary' command shown in the exhibit; then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

A. The local BGP peer has received a total of 3 BGP prefixes.

B. Local BGP peer has not received an OpenConfirm from 10.200.3.1.

C. BGP state of the peer 10.125.0.60 is Established.

D. BGP peer 10.200.3.1 has never been down since the BGP counters were cleared.

정답: B,C

문제4

Which two statements about FortiManager is true when it is deployed as a local FDS? (Choose two.)

A. It caches available firmware updates for unmanaged devices.

B. It provides VM license validation services.

C. It can be configured as an update server, or a rating server, but not both.

D. It supports rating requests from both managed and unmanaged devices.

정답: B,D

문제5

Which statement is true regarding File description (FD) conserve mode?

A. A FortiGate enters FD conserve mode when the amount of available description is less than 5%.

B. Restarting the WAD process is required to leave FD conserve mode.

C. IPS inspection is affected when FortiGate enters FD conserve mode.

D. FD conserve mode affects all daemons running on the device.

정답: A

문제6

View the exhibit, which contains the output of diagnose sys session list, and then answer the question below.

If the HA ID for the primary unit is zero (0), which statement is correct regarding the output?

A. This session cannot be synced with the slave unit.

B. This session is for HA heartbeat traffic.

C. The inspection of this session has been offloaded to the slave unit.

D. This session is synced with the slave unit.

정답: D

문제7

When does a RADIUS server send an Access-Challenge packet?

A. The server requires more information from the user, such as the token code for two-factor authentication.

B. The user account is not found in the server.

C. The user credentials are wrong.

D. The server does not have the user credentials yet.

정답: A

문제8

View the exhibit, which contains a partial routing table, and then answer the question below.

Assuming all the appropriate firewall policies are configured, which of the following pings will FortiGate route? (Choose two.)

A. Source IP address 10.72.3.52, Destination IP address 10.1.0.254.

B. Source IP address 10.72.3.27, Destination IP address 10.1.0.52.

C. Source IP address 10.1.0.24, Destination IP address 10.72.3.20.

D. Source IP address 10.73.9.10, Destination IP address 10.72.3.15.

정답: A,B

문제9

What configuration changes can reduce the memory utilization in a FortiGate? (Choose two.)

A. Increase the TCP session timers.

B. Increase the FortiGuard cache time to live.

C. Reduce the maximum file size to inspect.

D. Reduce the session time to live.

정답: C,D

문제10

An administrator is running the following sniffer in a FortiGate:
diagnose sniffer packet any "host 10.0.2.10" 2
What information is included in the output of the sniffer? (Choose two.)

A. IP payload.

B. Port names.

C. IP headers.

D. Ethernet headers.

정답: A,C

설명: (DumpTOP 회원만 볼 수 있음)

최신 NSE7_EFW-6.4 무료덤프 - Fortinet NSE 7 - Enterprise Firewall 6.4

우리와 연락하기

유용한 링크

최신 업데이트