최신 NSE7_EFW-6.4 무료덤프 - Fortinet NSE 7

문제1

View the global IPS configuration, and then answer the question below.

Which of the following statements is true regarding this configuration?

A. FortiGate will spawn IPS engine instances based on the system load.

B. New packets will be passed through without inspection if the IPS socket buffer runs out of memory.

C. IPS will use the faster matching algorithm which is only available for units with more than 4 GB memory.

D. IPS will scan every byte in every session.

정답: D

문제2

Examine the following partial outputs from two routing debug commands; then answer the question below.
# get router info kernel
tab=254 vf=0 scope=0type=1 proto=11 prio=0 0.0.0.0/0.0.0.0/0->0.0.0.0/0 pref=0.0.0.0
gwy=10.200.1.254 dev=2(port1)
tab=254 vf=0 scope=0type=1 proto=11 prio=10 0.0.0.0/0.0.0.0/0->0.0.0.0/0 pref=0.0.0.0
gwy=10.200.2.254 dev=3(port2)
tab=254 vf=0 scope=253type=1 proto=2 prio=0 0.0.0.0/0.0.0.0/.->10.0.1.0/24 pref=10.0.1.254
gwy=0.0.0.0 dev=4(port3)
# get router info routing-table all s*0.0.0.0/0 [10/0] via 10.200.1.254, portl [10/0] via 10.200.2.254, port2, [10/0] dO.0.1.0/24 is directly connected, port3 dO.200.1.0/24 is directly connected, portl d0.200.2.0/24 is directly connected, port2
Which outbound interface or interfaces will be used by this FortiGate to route web traffic from internal users to the Internet?

A. port2.

B. Both portl and port2.

C. port3.

D. port!

정답: A

문제3

An administrator has configured a FortiGate device with two VDOMs: root and internal. The administrator has also created and inter-VDOM link that connects both VDOMs. The objective is to have each VDOM advertise some routes to the other VDOM via OSPF through the inter-VDOM link. What OSPF configuration settings must match in both VDOMs to have the OSPF adjacency successfully forming? (Choose three.)

A. Interface subnet mask.

B. Router ID.

C. OSPF interface MTU.

D. OSPF interface area.

E. OSPF interface cost.

정답: A,C,D

문제4

Which configuration can be used to reduce the number of BGP sessions in an IBGP network?

A. Route reflector

B. Next-hop-self

C. Neighbor group

D. Neighbor range

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제5

View the exhibit, which contains the output of get sys ha status, and then answer the question below.

Which statements are correct regarding the output? (Choose two.)

A. The HA management IP is 169.254.0.2.

B. port 7 is used the HA heartbeat on all devices in the cluster.

C. The slave configuration is not synchronized with the master.

D. Master is selected because it is the only device in the cluster.

정답: B,C

문제6

A FortiGate is rebooting unexpectedly without any apparent reason. What troubleshooting tools could an administrator use to get more information about the problem? (Choose two.)

A. Policy monitor.

B. Crashlogs.

C. Logs.

D. Firewall monitor.

정답: B,C

문제7

View the following FortiGate configuration.

All traffic to the Internet currently egresses from port1. The exhibit shows partial session information for Internet traffic from a user on the internal network:

If the priority on route ID 1 were changed from 5 to 20, what would happen to traffic matching that user's session?

A. The session would remain in the session table, but its traffic would now egress from both port1 and port2.

B. The session would be deleted, so the client would need to start a new session.

C. The session would remain in the session table, and its traffic would still egress from port1.

D. The session would remain in the session table, and its traffic would start to egress from port2.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제8

Examine the following partial output from two system debug commands; then answer the question below.

Which of the following statements are true regarding the above outputs? (Choose two.)

A. The Cached value is always the Active value plus the Inactive value

B. Kernel indirectly accesses the low memory (LowTotal) through memory paging

C. The unit is running a 32-bit FortiOS

D. The unit is in kernel conserve mode

정답: A,C

문제9

Which statement is true regarding File description (FD) conserve mode?

A. A FortiGate enters FD conserve mode when the amount of available description is less than 5%.

B. Restarting the WAD process is required to leave FD conserve mode.

C. IPS inspection is affected when FortiGate enters FD conserve mode.

D. FD conserve mode affects all daemons running on the device.

정답: A

문제10

View the exhibit, which contains the partial output of a diagnose command, and then answer the question below.

Based on the output, which of the following statements is correct?

A. Quick mode selectors are disabled.

B. DPD is disabled.

C. Anti-reply is enabled.

D. Remote gateway IP is 10.200.5.1.

정답: C

최신 NSE7_EFW-6.4 무료덤프 - Fortinet NSE 7 - Enterprise Firewall 6.4

우리와 연락하기

유용한 링크

최신 업데이트