Fortinet NSE7_SSE_AR-26 考試概覽:

認證廠商:	Fortinet
考試名稱:	Fortinet NSE 7 - FortiSASE 26 架構師認證考試
考試代碼:	NSE7_SSE_AR-26
考試時間:	75 分鐘
考試形式:	情境導向試題, 選擇題
實際考試題數:	35-40 題
證照有效期限:	2 年
支援語言:	英文
相關認證:	NSE 7 - FortiSASE 企業管理員（推薦培訓課程） NSE 7 - SASE NSE 6 - SD-WAN 企業管理員認證
及格分數:	及格/不及格制
考試費用:	400 美元
推薦課程:	SD-WAN Enterprise Administrator FortiSASE 26 Enterprise Administrator
考試報名:	Pearson VUE Fortinet 認證考試專區 Fortinet 訓練機構認證專區
範例考題:	Fortinet NSE7_SSE_AR-26 範例考題
考試方式:	可於 Pearson VUE 考試中心應考，或透過 Pearson VUE OnVUE 線上監考模式應考。
必備條件:	無強制性前置考試要求。Fortinet 建議具備 FortiSASE 與 SD-WAN 技術相關經驗。推薦修習課程包含 FortiSASE Enterprise Administrator 以及 SD-WAN Enterprise Administrator。
官方大綱網址:	https://training.fortinet.com/local/staticpage/view.php?page=sase_architect_exam

Fortinet NSE7_SSE_AR-26 考試大綱主題:

章節	目標
營運與管理	- 管理作業 1. 監控與分析 2. 日誌記錄與報表產出 3. 集中式管理
FortiSASE 架構與設計	- SASE 架構概念 1. Secure Internet Access (SIA) 2. Zero Trust Network Access (ZTNA) 3. Secure SaaS Access (SSA) 4. Secure Private Access (SPA)
安全防護與故障排除	- 安全營運 1. 威脅防護 2. 合規強制執行 3. 部署與連線問題故障排除 4. 實務營運情境
部署與設定	- FortiSASE 部署作業 1. 政策設定 2. 遠端使用者部署 3. 身分識別與端點整合 4. 分支機構部署

最新的 NSE 7 Network Security Architect NSE7_SSE_AR-26 免費考試真題：

問題 #1

As an IT manager for a healthcare company, you want to delegate the installation and management of your SD-WAN deployment to a managed security service provider (MSSP). Each site must maintain direct internet access and ensure that it is secure. You expected significant traffic flow between the sites and want to delegate as much of the network administration and management as possible to the MSSP. Which two MSSP deployment blueprints best address the customer's requirements? (Choose two.)

A. Install a dedicated hub at the MSSP premises for the new customer, and install the spokes at the customer premises.
B. Use a shared hub at the MSSP premises and a dedicated hub at the customer premises and install the spokes at the customer premises.
C. Install the hub and spokes at the customer premises and enable the MSSP to manage the SD-WAN deployment using FortiManager with a dedicated ADOM.
D. Use a shared hub at the MSSP premises with a dedicated VDOM for the new customer, and install the spokes at the customer premises.

顯示解答討論 0

答案：A,D 🗳️

說明：（僅 VCESoft 成員可見）

問題 #2

Which component, typically categorized under network edge connectivity rather than cloud-delivered security controls, is incorporated as a foundational element within a secure access service edge (SASE) architecture but is not considered part of a security service edge (SSE) framework?

A. Cloud access security broker (CASB)
B. Zero trust network access (ZTNA)
C. Software-Defined WAN (SD-WAN)
D. Secure web gateway (SWG)

顯示解答討論 0

答案：C 🗳️

問題 #3

Which two components are part of onboarding a proxy-based endpoint for secure internet access (SIA)?
(Choose two.)

A. Tunnel policy
B. Proxy auto-configuration (PAC) file
C. FortiSASE certificate authority (CA) certificate
D. FortiClient software

顯示解答討論 0

答案：B,C 🗳️

說明：（僅 VCESoft 成員可見）

問題 #4

Which two features must you configure before FortiGate can steer traffic according to SD-WAN rules?
Choose two answers.

A. Security profiles
B. Underlay links
C. Overlay links
D. Firewall policies
E. Traffic shaping

顯示解答討論 0

答案：B,D 🗳️

說明：（僅 VCESoft 成員可見）

問題 #5

Refer to the exhibit.

How does FortiGate handle the ICMP traffic with the source IP address 10.0.1.125 and the destination IP address 128.66.0.125?

A. FortiGate routes the traffic flow according to the forwarding information base (FIB).
B. FortiGate steers the traffic flow through port2.
C. FortiGate drops the traffic flow.
D. FortiGate load balances the traffic flow through port7 and port8.

顯示解答討論 0

答案：A 🗳️

說明：（僅 VCESoft 成員可見）

正在檢視第 1 頁（共 23 頁）。
正在檢視第 1-5 題（共 115 題）。