최신 NSE7_EFW-7.2 무료덤프 - Fortinet NSE 7

문제1

How are bulk configuration changes made using FortiManager CLI scripts? (Choose two.)

A. When run on the Device Database, changes are applied directly to the managed FortiGate device.

B. When run on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.

C. When run on the All FortiGate in ADOM, changes are automatically installed without the creation of a new revision history.

D. When run on the Policy Package, ADOM database, you must use the installation wizard to apply the changes to the managed FortiGate device.

정답: B,D

문제2

Which two statements about the Security Fabric are true? (Choose two.)

A. Only FortiGate devices with configuration-sync sel to Local receive and synchronize the global CMDB objects that the root FortiGate sends.

B. Each member of the Security Fabric maintains the shared Security Fabric map.

C. Each FortiGate device in the Security Fabric must have bidirectional FortiTelemetry connectivity.

D. FortiGate uses the FortiTelemetry protocol to communicate with FortiAnalyzer.

E. Only the root FortiGate collects network topology information and forwards it to FortiAnalyzer.

정답: C,E

문제3

Exhibit.

Refer to the exhibit, which contains a partial VPN configuration.
What can you conclude from this configuration1?

A. The routing table shows a single IPSec virtual interface.

B. The VPN should use the dynamic routing protocol to exchange routing information Through the tunnels.

C. FortiGate creates separate virtual interfaces for each dial up client.

D. Dead peer detection s disabled.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제4

In which two ways does fortiManager function when it is deployed as a local FDS? (Choose two)

A. It supports rating requests from non-FortiGate devices.

B. lt can be configured as an update server a rating server or both

C. It caches available firmware updates for unmanaged devices

D. It provides VM license validation services

정답: B,D

설명: (DumpTOP 회원만 볼 수 있음)

문제5

After enabling IPS you receive feedback about traffic being dropped.
What could be the reason?

A. IPS is configured to monitor

B. Traffic-submit is set to disable

C. Np-accel-mode is set to enable

D. Fail-open is set to disable

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제6

Which two statements about the BFD parameter in BGP are true? (Choose two.)

A. The two routers must be connected to the same subnet.

B. It allows failure detection in less than one second.

C. It detects only two-way failures.

D. It is supported for neighbors over multiple hops.

정답: B,D

설명: (DumpTOP 회원만 볼 수 있음)

문제7

Refer to the exhibit, which shows a network diagram.

Which protocol should you use to configure the FortiGate cluster?

A. FGCP in active-passive mode

B. FGSP

C. FGCP in active-active mode

D. VRRP

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제8

Exhibit.

Refer to the exhibit, which shows a partial touting table
What two concisions can you draw from the corresponding FortiGate configuration? (Choose two.)

A. net-device is enabled in the tunnel IPSec phase 1 configuration

B. OSPI is configured to run over IPSec.

C. IPSec Tunnel aggregation is configured

D. add-route is disabled in the tunnel IPSec phase 1 configuration.

정답: A,D

설명: (DumpTOP 회원만 볼 수 있음)

최신 NSE7_EFW-7.2 무료덤프 - Fortinet NSE 7 - Enterprise Firewall 7.2

우리와 연락하기

유용한 링크

최신 업데이트