最新的Fortinet NSE7_EFW免費考試真題

問題1

Which of the following conditions must be met for a static route to be active in the routing table? (Choose three.)

A. The next-hop IP address belongs to one of the outgoing interface subnets.

B. The link health monitor (if configured) is up.

C. The outgoing interface is up.

D. There is no other route, to the same destination, with a higher distance.

E. The next-hop IP address is up.

正確答案: C,D,E

問題2

An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator noticed that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link-failed-signal to fix the problem. Which statement is correct regarding this command?

A. Sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.

B. Forces the former primary device to shut down all its non-heartbeat interfaces for one second while the failover occurs.

C. Sends a link failed signal to all connected devices.

D. Disables all the non-heartbeat interfaces in all the HA members for two seconds after a failover.

正確答案: B

問題3

View the exhibit, which contains the output of a diagnose command, and the answer the question below.

Which statements are true regarding the Weight value?

A. Its initial value is statically set to 10.

B. Its initial value is calculated based on the round trip delay (RTT).

C. It determines which FortiGuard server is used for license validation.

D. Its value is incremented with each packet lost.

正確答案: D

問題4

Which statement is true regarding File description (FD) conserve mode?

A. Restarting the WAD process is required to leave FD conserve mode.

B. A FortiGate enters FD conserve mode when the amount of available description is less than 5%.

C. IPS inspection is affected when FortiGate enters FD conserve mode.

D. FD conserve mode affects all daemons running on the device.

正確答案: B

問題5

View the exhibit, which contains a session entry, and then answer the question below.

Which statement is correct regarding this session?

A. It is an ICMP session from 10.1.10.10 to 10.200.5.1.

B. It is an ICMP session from 10.1.10.10 to 10.200.1.1.

C. It is a TCP session in ESTABLISHED state from 10.1.10.10 to 10.200.5.1.

D. It is a TCP session in CLOSE_WAIT state from 10.1.10.10 to 10.200.1.1.

正確答案: B

問題6

Two independent FortiGate HA clusters are connected to the same broadcast domain. The administrator has reported that both clusters are using the same HA virtual MAC address. This creates a duplicated MAC address problem in the network. What HA setting must be changed in one of the HA clusters to fix the problem?

A. Group name.

B. Gratuitous ARPs.

C. Group ID.

D. Session pickup.

正確答案: C

問題7

Examine the output of the 'diagnose ips anomaly list' command shown in the exhibit; then answer the question below.

Which IP addresses are included in the output of this command?

A. Those whose traffic matches an IPS sensor.

B. Those whose traffic matches a DoS policy.

C. Those whose traffic exceeded a threshold of a matching DoS policy.

D. Those whose traffic was detected as an anomaly by an IPS sensor.

正確答案: B

問題8

Which of the following tasks are automated using the Install Wizard on FortiManager? (Choose two.)

A. Install configuration changes to managed devices.

B. Preview pending configuration changes for managed devices.

C. Import interface mappings from managed devices.

D. Import policy packages from managed devices.

E. Add devices to FortiManager.

正確答案: A,E

問題9

A corporate network allows Internet Access to FSSO users only. The FSSO user student does not have Internet access after successfully logged into the Windows AD network. The output of the 'diagnose debug authd fsso list' command does not show student as an active FSSO user. Other FSSO users can access the Internet without problems. What should the administrator check? (Choose two.)

A. At least one of the student's user groups must be allowed by a FortiGate firewall policy.

B. The user student must not be listed in the CA's ignore user list.

C. The student workstation's IP subnet must be listed in the CA's trusted list.

D. The user student must belong to one or more of the monitored user groups.

正確答案: A,D

最新的Fortinet NSE7 Enterprise Firewall - FortiOS 5.4 - NSE7_EFW免費考試真題

聯系我們

站內鏈接

最新更新