Fortinet NSE7_EFW-6.0 問題集

質問 1：
The logs in a FSSO collector agent (CA) are showing the following error:
failed to connect to registry: PIKA1026 (192.168.12.232)
What can be the reason for this error?
A. The remote registry service is not running in the workstation 192.168.12.232.
B. The CA cannot reach the FortiGate with the IP address 192.168.12.232.
C. The CA cannot resolve the name of the workstation.
D. The FortiGate cannot resolve the name of the workstation.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Which of the following statements is true regarding a FortiGate configured as an explicit web proxy?
A. FortiGate limits the number of simultaneous sessions per explicit web proxy user The limit CAN be modified by the administrator
B. FortiGate limits the total number of simultaneous explicit web proxy users.
C. FortiGate limits the number of workstations that authenticate using the same web proxy user credentials.
This limit CANNOT be modified by the administrator.
D. FortiGate limits the number of simultaneous sessions per explicit web proxy user. This limit CANNOT be modified by the administrator.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 3：
View the exhibit, which contains the output of a diagnose command, and then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)
A. FortiGate will probe 121.111.236.179 every fifteen minutes for a response.
B. Servers with the D flag are considered to be down.
C. Servers with a negative TZ value are experiencing a service outage.
D. FortiGate used 209.222.147.3 as the initial server to validate its contract.
正解：A,D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
View the exhibit, which contains the output of get sys ha status, and then answer the question below.

Which statements are correct regarding the output? (Choose two.)
A. The HA management IP is 169.254.0.2.
B. port 7 is used the HA heartbeat on all devices in the cluster.
C. The slave configuration is not synchronized with the master.
D. Master is selected because it is the only device in the cluster.
正解：B,C

質問 5：
What is the purpose of an internal segmentation firewall (ISFW)?
A. It inspects incoming traffic to protect services in the corporate DMZ.
B. It is an all-in-one security appliance that is placed at remote sites to extend the enterprise network.
C. It splits the network into multiple security segments to minimize the impact of breaches.
D. It is the first line of defense at the network perimeter.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
An administrator has configured the following CLI script on FortiManager, which failed to apply any changes to the managed device after being executed.

Why didn't the script make any changes to the managed device?
A. CLI scripts will add objects only if they are referenced by policies.
B. Commands that start with the # sign are not executed.
C. Incomplete commands are ignored in CLI scripts.
D. Static routes can only be added using TCL scripts.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 7：
What conditions are required for two FortiGate devices to form an OSPF adjacency? (Choose three.)
A. OSPF peer IDs match.
B. OSPF IP MTUs match.
C. IP addresses are in the same subnet.
D. OSPF costs match.
E. Hello and dead intervals match.
正解：B,C,E
解説: (Topexam メンバーにのみ表示されます)