최신 NSE7_EFW-6.4 무료덤프 - Fortinet NSE 7

문제1

Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.)

A. UTM failopen

B. IPS failopen

C. AV failopen

D. mem failopen

정답: B,C

문제2

In which two states is a given session categorized as ephemeral? (Choose two.)

A. A UDP session with only one packet received.

B. A TCP session waiting to complete the three-way handshake.

C. A TCP session waiting for FIN ACK.

D. A UDP session with packets sent and received.

정답: A,B

문제3

View the exhibit, which contains a partial output of an IKE real-time debug, and then answer the question below.

Based on the debug output, which phase-1 setting is enabled in the configuration of this VPN?

A. auto-discovery-forwarder

B. auto-discovery-shortcut

C. auto-discovery-sender

D. auto-discovery-receiver

정답: A

문제4

View the exhibit, which contains the output of a web diagnose command, and then answer the question below.

Which one of the following statements explains why the cache statistics are all zeros?

A. The administrator has reallocated the cache memory to a separate process.

B. FortiGate is using a flow-based web filter and the cache applies only to proxy-based inspection.

C. There are no users making web requests.

D. The FortiGuard web filter cache is disabled in the FortiGate's configuration.

정답: D

문제5

Which two statements about bulk configuration changes made using FortiManager CLI scripts are correct? (Choose two.)

A. When run on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate device.

B. When run on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.

C. When run on the All FortiGate in ADOM, changes are automatically installed without the creation of a new revision history.

D. When run on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate device.

정답: B,D

문제6

A FortiGate's portl is connected to a private network. Its port2 is connected to the Internet. Explicit web proxy is enabled in port1 and only explicit web proxy users can access the Internet. Web cache is NOT enabled. An internal web proxy user is downloading a file from the Internet via HTTP. Which statements are true regarding the two entries in the FortiGate session table related with this traffic? (Choose two.)

A. One of the sessions has the IP address of port2 as the source IP address.

B. Both session have the local flag on.

C. One session has the proxy flag on, the other one does not.

D. The destination IP addresses of both sessions are IP addresses assigned to FortiGate's interfaces.

정답: A,B

문제7

Examine the following partial outputs from two routing debug commands; then answer the question below.
# get router info kernel
tab=254 vf=0 scope=0type=1 proto=11 prio=0 0.0.0.0/0.0.0.0/0->0.0.0.0/0 pref=0.0.0.0
gwy=10.200.1.254 dev=2(port1)
tab=254 vf=0 scope=0type=1 proto=11 prio=10 0.0.0.0/0.0.0.0/0->0.0.0.0/0 pref=0.0.0.0
gwy=10.200.2.254 dev=3(port2)
tab=254 vf=0 scope=253type=1 proto=2 prio=0 0.0.0.0/0.0.0.0/.->10.0.1.0/24 pref=10.0.1.254
gwy=0.0.0.0 dev=4(port3)
# get router info routing-table all s*0.0.0.0/0 [10/0] via 10.200.1.254, portl [10/0] via 10.200.2.254, port2, [10/0] dO.0.1.0/24 is directly connected, port3 dO.200.1.0/24 is directly connected, portl d0.200.2.0/24 is directly connected, port2
Which outbound interface or interfaces will be used by this FortiGate to route web traffic from internal users to the Internet?

A. port2.

B. Both portl and port2.

C. port3.

D. port!

정답: A

문제8

View the exhibit, which contains the output of a diagnose command, and then answer the question below.

What statements are correct regarding the output? (Choose two.)

A. Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next-hop IP address 10.200.1.1.

B. Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next-hop IP address 10.0.1.10.

C. This is an expected session created by a session helper.

D. This is an expected session created by an application control profile.

정답: A,C

문제9

View the exhibit, which contains the output of a BGP debug command, and then answer the question below.

Which of the following statements about the exhibit are true? (Choose two.)

A. The local router has not established a TCP session with 100.64.3.1.

B. The local router's BGP state is Established with the 10.125.0.60 peer.

C. Since the counters were last reset; the 10.200.3.1 peer has never been down.

D. The local router has received a total of three BGP prefixes from all peers.

정답: A,B

문제10

When using the SSL certificate inspection method for HTTPS traffic, how does FortiGate filter web requests when the browser client does not provide the server name indication (SNI) extension?

A. FortiGate uses the requested URL from the user's web browser.

B. FortiGate uses CN information from the Subject field in the server's certificate.

C. FortiGate blocks the request without any further inspection.

D. FortiGate switches to the full SSL inspection method to decrypt the data.

정답: B

최신 NSE7_EFW-6.4 무료덤프 - Fortinet NSE 7 - Enterprise Firewall 6.4

우리와 연락하기

유용한 링크

최신 업데이트