NSE7_EFW-6.4無料問題集「Fortinet NSE 7

質問 1

Which two conditions must be met for a statistic route to be active in the routing table? (Choose two.)

（A）The outgoing interface is up.

（B）The link health monitor (if configured) is up.

（C）There is no other route, to the same destination, with a higher distance.

（D）The next-hop IP address is up.

正解：A、B 解答を投票する

質問 2

An administrator cannot connect to the GIU of a FortiGate unit with the IP address 10.0.1.254. The administrator runs the debug flow while attempting the connection using HTTP. The output of the debug flow is shown in the exhibit:

Based on the error displayed by the debug flow, which are valid reasons for this problem? (Choose two.)

（A）HTTP administrative access is disabled in the FortiGate interface with the IP address 10.0.1.254.

（B）Redirection of HTTP to HTTPS administrative access is disabled.

（C）The packet is denied because of reverse path forwarding check.

（D）HTTP administrative access is configured with a port number different than 80.

正解：A、D 解答を投票する

質問 3

Refer to exhibit, which contains the output of a BGP debug command.

Which statement explains why the state of the 10.200.3.1 peer is Connect?

（A）The local router has received the BGP prefixes from the remote peer.

（B）The local router is receiving the BGP keepalives from the peer, but it has not received a BGP prefix yet.

（C）The TCP session to 10.200.3.1 has not completed the three-way handshake.

（D）The local router is receiving BGP keepalives from the remote peer, but the local peer has not received the OpenConfirm yet.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

A FortiGate device has the following LDAP configuration:

The administrator executed the 'dsquery' command in the Windows LDAp server 10.0.1.10, and got the following output:
>dsquery user -samid administrator
"CN=Administrator, CN=Users, DC=trainingAD, DC=training, DC=lab"
Based on the output, what FortiGate LDAP setting is configured incorrectly?

（A）dn.

（B）cnid.

（C）username.

（D）password.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Examine the following partial outputs from two routing debug commands; then answer the question below.
# get router info kernel
tab=254 vf=0 scope=0type=1 proto=11 prio=0 0.0.0.0/0.0.0.0/0->0.0.0.0/0 pref=0.0.0.0
gwy=10.200.1.254 dev=2(port1)
tab=254 vf=0 scope=0type=1 proto=11 prio=10 0.0.0.0/0.0.0.0/0->0.0.0.0/0 pref=0.0.0.0
gwy=10.200.2.254 dev=3(port2)
tab=254 vf=0 scope=253type=1 proto=2 prio=0 0.0.0.0/0.0.0.0/.->10.0.1.0/24 pref=10.0.1.254
gwy=0.0.0.0 dev=4(port3)
# get router info routing-table all s*0.0.0.0/0 [10/0] via 10.200.1.254, portl [10/0] via 10.200.2.254, port2, [10/0] dO.0.1.0/24 is directly connected, port3 dO.200.1.0/24 is directly connected, portl d0.200.2.0/24 is directly connected, port2
Which outbound interface or interfaces will be used by this FortiGate to route web traffic from internal users to the Internet?

（A）port!

（B）Both portl and port2.

（C）port3.

（D）port2.

正解：D 解答を投票する

質問 6

Which real time debug should an administrator enable to troubleshoot RADIUS authentication problems?

（A）Diagnose authd console -log enable.

（B）Diagnose debug application fnbamd -1.

（C）Diagnose radius console -log enable.

（D）Diagnose debug application radius -1.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

Exhibits:

Refer to the exhibits, which contain the network topology and BGP configuration for a hub.
An administrator is trying to configure ADVPN with a hub-spoke VPN setup using iBGP. All the VPNs are up and connected to the hub. The hub is receiving route information from both spokes over iBGP; however, the spokes are not receiving route information from each other.
What change must the administrator make to the hub BGP configuration so that the routes learned by one spoke are forwarded to the other spokes?

（A）Configure an individual neighbor and remove neighbor-range configuration.

（B）Configure the hub as a route reflector client.

（C）Make the configuration of remote-as different from the configuration of local-as.

（D）Change the router id to 10.1.0.254.

正解：B 解答を投票する

質問 8

The logs in a FSSO collector agent (CA) are showing the following error:
failed to connect to registry: PIKA1026 (192.168.12.232)
What can be the reason for this error?

（A）The CA cannot reach the FortiGate with the IP address 192.168.12.232.

（B）The FortiGate cannot resolve the name of the workstation.

（C）The remote registry service is not running in the workstation 192.168.12.232.

（D）The CA cannot resolve the name of the workstation.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

Refer to the exhibit, which contains the partial output of a diagnose command.

Based on the output, which two statements are correct? (Choose two.)

（A）Quick mode selectors are disabled.

（B）The remote gateway IP is 10.200.4.1.

（C）Anti-replay is enabled

（D）DPD is disabled.

正解：B、C 解答を投票する

質問 10

Examine the output from the 'diagnose debug authd fsso list' command; then answer the question below.
# diagnose debug authd fsso list -FSSO logons-IP: 192.168.3.1 User: STUDENT Groups: TRAININGAD/USERS Workstation: INTERNAL2. TRAINING. LAB The IP address 192.168.3.1 is NOT the one used by the workstation INTERNAL2. TRAINING. LAB.
What should the administrator check?

（A）The DNS name resolution for the workstation name INTERNAL2. TRAINING. LAB.

（B）The source IP address of the traffic arriving to the FortiGate from the workstation INTERNAL2. TRAINING. LAB.

（C）The reserve DNS lookup forthe IP address 192.168.3.1.

（D）The IP address recorded in the logon event for the user STUDENT.

正解：B 解答を投票する

NSE7_EFW-6.4 無料問題集「Fortinet NSE 7 - Enterprise Firewall 6.4」

弊社を連絡する

関連リンク

トップ試験