FCSS_NST_SE-7.4無料問題集「Fortinet FCSS - Network Security 7.4 Support Engineer」

質問 1

An administrator wants to capture encrypted phase 2 traffic between two FotiGate devices using the built-in sniffer.
If the administrator knows that there Is no NAT device located between both FortiGate devices, which command should the administrator run?

（A）diagnose sniffer packet any 'lp proto 50'

（B）diagnose sniffer packet any 'udp port 500'

（C）diagnose sniffer packet any 'ah'

（D）diagnose sniffer packet any 'udp port 4500'

正解：A 解答を投票する

質問 2

Which exchange lakes care of DoS protection in IKEv2?

（A）IKE_Auth

（B）IKE_Req_INIT

（C）Create_CHILD_SA

（D）IKE_SA_NIT

正解：B 解答を投票する

質問 3

Refer to the exhibit, which shows partial outputs from two routing debug commands.

Which change must an administrator make on FortiGate to route web traffic from internal users to the internet, using ECMP?

（A）Set preserve-session-route to enable.

（B）Set snat-route-change to enable.

（C）Set the priority of the static default route using port2 to 1.

（D）Set the priority of the static default route using port1 to 10.

正解：D 解答を投票する

質問 4

Refer to the exhibit, which shows a truncated output of a real-time LDAP debug.

What two conclusions can you draw from the output? (Choose two.)

（A）FortiOS is able to locate the user in step 3 (Bind Request) of the LDAP authentication process.

（B）FortiOS is performing the second step (Search Request) in the LDAP authentication process.

（C）The name of the configured LDAP server is Lab.

（D）The user is authenticating using CN=John Smith.

正解：B、D 解答を投票する

FCSS_NST_SE-7.4 無料問題集「Fortinet FCSS - Network Security 7.4 Support Engineer」

弊社を連絡する

関連リンク

トップ試験