最新的Fortinet NSE7免費考試真題

問題1

View the exhibit, which contains a session entry, and then answer the question below.

Which statement is correct regarding this session?

A. It is an ICMP session from 10.1.10.10 to 10.200.5.1.

B. It is an ICMP session from 10.1.10.10 to 10.200.1.1.

C. It is a TCP session in ESTABLISHED state from 10.1.10.10 to 10.200.5.1.

D. It is a TCP session in CLOSE_WAIT state from 10.1.10.10 to 10.200.1.1.

正確答案: B

問題2

View the exhibit, which contains the output of get sys ha status, and then answer the question below.

Which statements are correct regarding the output? (Choose two.)

A. The slave configuration is not synchronized with the master.

B. port 7 is used the HA heartbeat on all devices in the cluster.

C. Master is selected because it is the only device in the cluster.

D. The HA management IP is 169.254.0.2.

正確答案: A,C

問題3

Which statements about bulk configuration changes using FortiManager CLI scripts are correct? (Choose two.)

A. When executed on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate.

B. When executed on the All FortiGate in ADOM, changes are automatically installed without creating a new revision history.

C. When executed on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate.

D. When executed on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.

正確答案: C,D

問題4

View the exhibit, which contains the output of a diagnose command, and then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

A. Servers with a negative TZ value are experiencing a service outage.

B. FortiGate used 209.222.147.3 as the initial server to validate its contract.

C. FortiGate will probe 121.111.236.179 every fifteen minutes for a response.

D. Servers with the D flag are considered to be down.

正確答案: A,B

問題5

View the exhibit, which contains the partial output of an IKE real time debug, and then answer the question below.

The administrator does not have access to the remote gateway. Based on the debug output, what configuration changes can the administrator make to the local gateway to resolve the phase 1 negotiation error?

A. Change phase 1 encryption to 3DES and authentication to SHA256.

B. Change phase 1 encryption to AES128 and authentication to SHA512.

C. Change phase 1 encryption to AESCBC and authentication to SHA128.

D. Change phase 1 encryption to 3DES and authentication to CBC.

正確答案: B

問題6

An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator noticed that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link-failed-signal to fix the problem. Which statement is correct regarding this command?

A. Sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.

B. Forces the former primary device to shut down all its non-heartbeat interfaces for one second while the failover occurs.

C. Sends a link failed signal to all connected devices.

D. Disables all the non-heartbeat interfaces in all the HA members for two seconds after a failover.

正確答案: B

問題7

Which of the following tasks are automated using the Install Wizard on FortiManager? (Choose two.)

A. Install configuration changes to managed devices.

B. Preview pending configuration changes for managed devices.

C. Import interface mappings from managed devices.

D. Import policy packages from managed devices.

E. Add devices to FortiManager.

正確答案: A,E

問題8

View the central management configuration shown in the exhibit, and then answer the question below.

Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?

A. One of the public FortiGuard distribution servers

B. 10.0.1.242

C. 10.0.1.244

D. 10.0.1.240

正確答案: A

問題9

Examine the output from the BGP real time debug shown in the exhibit, then the answer the question below:

Which statements are true regarding the output in the exhibit? (Choose two.)

A. The state of the remote BGP peer is OpenConfirm.

B. Local BGP peer received a prefix for a default route.

C. BGP peers have successfully interchanged Open and Keepalive messages.

D. The state of the remote BGP peer will go to Connect after it confirms the received prefixes.

正確答案: B,C

最新的Fortinet NSE7 Enterprise Firewall - FortiOS 5.4 - NSE7免費考試真題

聯系我們

站內鏈接

最新更新