최신 NSE7_EFW-7.0 무료덤프 - Fortinet NSE 7

문제1

Refer to the exhibit, which shows a session table entry.

Which statement about FortiGate behavior relating to this session is true?

A. FortiGate is performing security profile inspection using the CPU. Most Voted

B. FortiGate forwarded this session without any inspection.

C. FortiGate applied only IPS inspection to this session.

D. FortiGate redirected the client to the captive portal to authenticate, so that a correct policy match could be made.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제2

View the exhibit, which contains the output of a debug command, and then answer the question below.

Which of the following statements about the exhibit are true? (Choose two.)

A. The local FortiGate has been elected as the OSPF backup designated router.

B. Port4 is connected to the OSPF backbone area.

C. The local FortiGate's OSPF router ID is 0.0.0.4

D. In the network on port4, two OSPF routers are down.

정답: B,C

문제3

Examine the output of the 'get router info ospf neighbor' command shown in the exhibit; then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.) Refer to the exhibit, which shows the output of a debug command.
Which statement about the output is true?

A. The local FortiGate is the designated router for the wan1 network.

B. TheOSPF routers with the IDs 0.0.0.69 and 0.0.0.117 are both designated routers for the war. l network.

C. The OSPF router with the ID 0.0.0.2 is the designated router for the ToRemote network.

D. The interface ToRemote is a point-to-point OSPF network.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제4

The CLI command set intelligent-mode <enable | disable> controls the IPS engine's adaptive scanning behavior. Which of the following statements describes IPS adaptive scanning?

A. Choose a matching algorithm based on available memory and the type of inspection being performed.

B. Downloads signatures on demand from FDS based on scanning requirements.

C. Determines when it is secure enough to stop scanning session traffic.

D. Determines the optimal number of IPS engines required based on system load.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제5

Which two tasks are automated using the Import Configuration wizard on FortiManager? (Choose two.)

A. Importing firewall address objects from managed devices

B. Importing static and dynamic route configurations from managed devices

C. Importing interface mappings from managed devices

D. Importing devices to FortiManager

정답: A,C

설명: (DumpTOP 회원만 볼 수 있음)

문제6

View the exhibit, which contains the output of a diagnose command, and then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

A. FortiGate will probe 121.111.236.179 every fifteen minutes for a response.

B. Servers with a negative TZ value are experiencing a service outage.

C. Servers with the D flag are considered to be down.

D. FortiGate used 209.222.147.3 as the initial server to validate its contract.

정답: A,D

설명: (DumpTOP 회원만 볼 수 있음)

문제7

An administrator has been assigned the task of creating a set of firewall policies which must be evaluated before any custom policies defined within the policy packages of managed FortiGate devices, across all 25 ADOMSs in FortiManager.
How should the administrator accomplish this task?

A. Use a CLI script from the root ADOM on FortiManager to push these new policies to all FortiGate devices, through the FGFM tunnel.

B. Create a footer policy in the Global ADOM containing the firewall policies that must be evaluated first, and then assign this footer policy to all other ADOMs.

C. Create a header policy in the Global ADOM containing the firewall policies that must be evaluated first, and then assign this header policy to all other ADOMs.

D. Move the FortiGate devices into a single globally scoped ADOM, and merge policy packages, inserting the new firewall policies at the top.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제8

Refer to the exhibit, which shows a session entry. Which statement about this session is true?

A. It is an ICMP session from 10.1.10.10 to 10.200.1.1.

B. It is a TCP session in close_wait state, from 10. l. 10.10 to 10.200.1.1.

C. It is an ICMP session from 10.1.10.10 to 10.200.5. 1.

D. It is a TCP session in the established state, from 10.1.10.10 to 10.200.5.1.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제9

Examine the output from the 'diagnose debug authd fsso list' command; then answer the question below.
# diagnose debug authd fsso list -FSSO logons-IP: 192.168.3.1 User: STUDENT Groups: TRAININGAD/USERS Workstation: INTERNAL2. TRAINING. LAB The IP address 192.168.3.1 is NOT the one used by the workstation INTERNAL2. TRAINING. LAB.
What should the administrator check?

A. The IP address recorded in the logon event for the user STUDENT.

B. The DNS name resolution for the workstation name INTERNAL2. TRAINING. LAB.

C. The source IP address of the traffic arriving to the FortiGate from the workstation INTERNAL2. TRAINING. LAB.

D. The reserve DNS lookup forthe IP address 192.168.3.1.

정답: C

문제10

Which of the following statements are true regarding the SIP session helper and the SIP application layer gateway (ALG)? (Choose three.)

A. SIP ALG can create expected sessions for media traffic; SIP helper does not.

B. SIP ALG supports SIP over IPv6; SIP helper does not.

C. SIP ALG supports SIP HA failover; SIP helper does not.

D. SIP helper supports SIP over TCP and UDP; SIP ALG supports only SIP over UDP.

E. SIP session helper runs in the kernel; SIP ALG runs as a user space process.

정답: A,B,C

최신 NSE7_EFW-7.0 무료덤프 - Fortinet NSE 7 - Enterprise Firewall 7.0

우리와 연락하기

유용한 링크

최신 업데이트