最新的Network Security Architect認證 NSE7_EFW考試題庫

問題1

Examine the partial output from the IKE real time debug shown in the exhibit; then answer the question below.

Why didn't the tunnel come up?

A. The remote gateway's Phase-2 configuration does not match the local gateway's phase-2 configuration.

B. IKE mode configuration is not enabled in the remote IPsec gateway.

C. The remote gateway's Phase-1 configuration does not match the local gateway's phase-1 configuration.

D. One IPsec gateway is using main mode, while the other IPsec gateway is using aggressive mode.

正確答案: A

問題2

Which statement is true regarding File description (FD) conserve mode?

A. A FortiGate enters FD conserve mode when the amount of available description is less than 5%.

B. FD conserve mode affects all daemons running on the device.

C. IPS inspection is affected when FortiGate enters FD conserve mode.

D. Restarting the WAD process is required to leave FD conserve mode.

正確答案: A

問題3

Examine the following partial output from two system debug commands; then answer the question below.

Which of the following statements are true regarding the above outputs? (Choose two.)

A. The Cached value is always the Active value plus the Inactive value

B. The unit is running a 32-bit FortiOS

C. The unit is in kernel conserve mode

D. Kernel indirectly accesses the low memory (LowTotal) through memory paging

正確答案: A,B

問題4

Which statements about bulk configuration changes using FortiManager CLI scripts are correct? (Choose two.)

A. When executed on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.

B. When executed on the All FortiGate in ADOM, changes are automatically installed without creating a new revision history.

C. When executed on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate.

D. When executed on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate.

正確答案: A,C

問題5

An administrator has enabled HA session synchronization in a HA cluster with two members. Which flag is added to a primary unit's session to indicate that it has been synchronized to the secondary unit?

A. nds.

B. synced

C. redir.

D. dirty.

正確答案: B

問題6

View the exhibit, which contains the output of a debug command, and then answer the question below.

What statement is correct about this FortiGate?

A. It is currently in kernel conserve mode because of high memory usage.

B. It is currently in system conserve mode because of high CPU usage.

C. It is currently in FD conserve mode.

D. It is currently in system conserve mode because of high memory usage.

正確答案: D

問題7

Two independent FortiGate HA clusters are connected to the same broadcast domain. The administrator has reported that both clusters are using the same HA virtual MAC address. This creates a duplicated MAC address problem in the network. What HA setting must be changed in one of the HA clusters to fix the problem?

A. Session pickup.

B. Gratuitous ARPs.

C. Group ID.

D. Group name.

正確答案: C

問題8

Examine the partial output from two web filter debug commands; then answer the question below:

Based on the above outputs, which is the FortiGuard web filter category for the web site www.fgt99.com?

A. Business.

B. Information technology.

C. Finance and banking

D. General organization.

正確答案: A

問題9

An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage. However, after the changes, one network application started to have problems. During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before the arrival of the SYN/ACKs. When the SYN/ACK packets arrive to the FortiGate, the unit has already deleted the respective sessions. Which TCP session timer must be increased to fix this problem?

A. TCP time wait.

B. TCP session time to live.

C. TCP half close.

D. TCP half open.

正確答案: D

最新的Fortinet NSE7 Enterprise Firewall - FortiOS 5.4 - NSE7_EFW免費考試真題

最新更新

站內鏈接

聯系我們