FCSS_EFW_AD-7.4無料問題集「Fortinet FCSS - Enterprise Firewall 7.4 Administrator」

質問 1

Which two events can trigger an HA failover? (Choose two.)

（A）The failure of a solid-state drive

（B）The physical disconnection of a heartbeat interface

（C）A session sync failure

（D）A configuration sync failure

正解：A、B 解答を投票する

質問 2

Which of the following statements is true regarding a FortiGate configured as an explicit web proxy?

（A）FortiGate limits the number of simultaneous sessions per explicit web proxy user. This limit CANNOT be modified by the administrator.

（B）FortiGate limits the number of workstations that authenticate using the same web proxy user credentials. This limit CANNOT be modified by the administrator.

（C）FortiGate limits the total number of simultaneous explicit web proxy users.

（D）FortiGate limits the number of simultaneous sessions per explicit web proxy user. The limit CAN be modified by the administrator.

正解：C 解答を投票する

質問 3

An administrator has configured two FortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device.
What can the administrator do to fix this problem?

（A）Verify that the speed and duplex settings match between the FortiGate interfaces and the connected switch ports.

（B）Configure set link-failed-signal enable under config system ha on both cluster members.

（C）Configure set send-garp-on-failover enable under config system ha on both cluster members.

（D）Configure remote link monitoring to detect an issue in the forwarding path.

正解：B 解答を投票する

質問 4

Which two statements about the Security Fabric are true? (Choose two.)

（A）Branch FortiGate devices must be configured first.

（B）All FortiGate devices in the Security Fabric must have bidirectional FortiTelemetry connectivity.

（C）FortiGate uses FortiTelemetry protocol to communicate with FortiAnalyzer.

（D）Only the root FortiGate collects network information and forwards it to FortiAnalyzer.

正解：B、C 解答を投票する

質問 5

View the exhibit, which contains the output of a real-time debug, and then answer the question below.

Which one of the following statements describes why the update is failing?

（A）The update should be using port 53 or port 8888, instead of port 443.

（B）The administrator should use the execute update-wf command instead.

（C）FortiGate is unable to resolve the required FQDN (service.fortiguard.net) for AV and IPS updates.

（D）FortiGate is unable to establish a TCP connection with FDS.

正解：D 解答を投票する

質問 6

View the following FortiGate configuration.

All traffic to the Internet currently egresses from port1.
The exhibit shows partial session information for Internet traffic from a user on the internal network:

If the priority on route ID 1 were changed from 5 to 20, what would happen to traffic matching that user's session?

（A）The session would remain the session table, but its traffic would now egress from both port 1and port2

（B）The session would remain the session table, and its traffic would start to egress from port2.

（C）The session would remain the session table, and its traffic would still egress from port 1.

（D）The session would be deleted, so the client would need to start a new session.

正解：C 解答を投票する

質問 7

View the central management configuration shown in the exhibit, and then answer the question below.

Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?

（A）10.0.1.242

（B）One of the public FortiGuard distribution servers

（C）0.0.1.244

（D）10.0.1.240

正解：B 解答を投票する

質問 8

View the IPS exit log, and then answer the question below.

What is the status of IPS on this FortiGate?

（A）IPS engine memory consumption has exceeded the model-specific predefined value.

（B）IPS daemon experienced a crash.

（C）All IPS-related features have been disabled in FortiGate's configuration.

（D）There are communication problems between the IPS engine and the management database.

正解：C 解答を投票する

質問 9

Which of the following statements about administrative domains (ADOMs) on FortiManager is true?

（A）ADOMs allow grouping of managed devices based on management criteria and administrative access.

（B）FortiGates with multiple VDOMs must be assigned to the same ADOM on FortiManager.

（C）The ADOM feature can be enabled by any administrator with super-user privileges.

（D）The number of configurable ADOMs is based on the FortiManager's FortiCare service contract.

正解：A 解答を投票する

質問 10

Refer to the exhibit, which shows a partial web filter profile configuration.

Which action will FortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?

（A）FortiGate will block the connection, based on the FortiGuard category based filter configuration.

（B）FortiGate will exempt the connection, based on the Web Content Filter configuration.

（C）FortiGate will allow the connection, based onthe URL Filter configuration.

（D）FortiGate will block the connection as an invalid URL.

正解：C 解答を投票する

質問 11

View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.

Why didn't the tunnel come up?

（A）The remote gateway's phase 1 configuration does not match the local gateway's phase 1 configuration.

（B）The pre-shared keys do not match.

（C）The remote gateway's phase 2 configuration does not match the local gateway's phase 2 configuration.

（D）The remote gateway is using aggressive mode and the local gateway is configured to use man mode.

正解：A 解答を投票する

質問 12

A corporate network allows internet Access to FSSO users only. The FSSO user student does not have internet access after successfully logged into the Windows AD network.
The output of the 'diagnose debug authd fsso list' command does not show student as an active FSSO user. Other FSSO users can access the Internet without problems.
What should the administrator check? (Choose two.)

（A）The student workstation's IP subnet must be listed in the CA's trusted list.

（B）At least one of the student's user groups must be allowed by a FortiGate firewall policy.

（C）The user student must not be listed in the CA's ignore user list.

（D）The user student must belong to one or more of the monitored user groups.

正解：C、D 解答を投票する

質問 13

An administrator cannot connect to the GIU of a FortiGate unit with the IP address 10.0.1.254. The administrator runs the debug flow while attempting the connection using HTTP.
The output of the debug flow is shown in the exhibit.

Based on the error displayed by the debug flow, which are valid reasons for this problem? (Choose two.)

（A）HTTP administrative access is disabled in the FortiGate interface with the IP address 10.0.1.254.

（B）Redirection of HTTP to HTTPS administrative access is disabled.

（C）The packet is denied because of reverse path forwarding check.

（D）HTTP administrative access is configured with a port number different than 80.

正解：A、D 解答を投票する

質問 14

An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator noticed that some of the switches in the network continue to send traffic to the former primary unit.
The administrator decides to enable the setting link-failed-signal to fix the problem.
Which statement is correct regarding this command?

（A）Forces the former primary device to shut down all its non-heartbeat interfaces for one second while the failover occurs.

（B）Sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.

（C）Sends a link failed signal to all connected devices.

（D）Disables all the non-heartbeat interfaces in all the HA members for two seconds after a failover.

正解：A 解答を投票する

質問 15

Examine the output of the 'diagnose debug rating' command shown in the exhibit; then answer the question below.

Which statement are true regarding the output in the exhibit? (Choose two.)

（A）FortiGate will send the FortiGuard queries to the server with highest weight.

（B）A server's round trip delay (RTT) is not used to calculate its weight.

（C）The TZ value represents the delta between each FortiGuard server's time zone and the FortiGate's time zone.

（D）There are three FortiGuard servers that are not responding to the queries sent by the FortiGate.

正解：A、C 解答を投票する

FCSS_EFW_AD-7.4 無料問題集「Fortinet FCSS - Enterprise Firewall 7.4 Administrator」

弊社を連絡する

関連リンク

トップ試験