Fortinet NSE7_EFW-6.4 問題集

質問 1：
Refer to the exhibit, which contains a TCL script configuration on FortiManager.

An administrator has configured the TCL script on FortiManager, but failed to apply any changes to the managed device after being executed.
Why did the TCL script fail to make any changes to the managed device?
A. Changes in an interface configuration can only be done by CLI script.
B. Incomplete commands are ignored in TCL scripts.
C. The TCL command run_cmd has not been created.
D. The TCL script must start with #include <>.
正解：C

質問 2：
View the exhibit, which contains the output of a diagnose command, and then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)
A. FortiGate will probe 121.111.236.179 every fifteen minutes for a response.
B. Servers with the D flag are considered to be down.
C. Servers with a negative TZ value are experiencing a service outage.
D. FortiGate used 209.222.147.3 as the initial server to validate its contract.
正解：A,D
解説: (Topexam メンバーにのみ表示されます)

質問 3：
An administrator has configured two FortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device. The administrator decides to enable the setting link-failed-signal to fix the problem.
Which statement about this setting is true?
A. It sends a link failed signal to all connected devices.
B. It forces the former primary device to shut down all its non-heartbeat interfaces for one second, while the failover occurs.
C. It sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.
D. It disabled all the non-heartbeat interfaces in all HA members for two seconds after a failover.
正解：B

質問 4：
Refer to the exhibit, which contains the output of a BGP debug command.

Which statement about the exhibit is true?
A. The local router has not established a TCP session with 100.64.3.1.
B. The local router BGP state is OpenConfirm with the 10.127.0.75 peer.
C. Since the counters were last reset, the 10.200.3.1 peer has never been down.
D. The local router has received a total of three BGP prefixes from all peers.
正解：A

質問 5：
Refer to the exhibit, which shows a session entry. Which statement about this session is true?

A. It is a TCP session in close_wait state, from 10. l. 10.10 to 10.200.1.1.
B. It is an ICMP session from 10.1.10.10 to 10.200.1.1.
C. It is an ICMP session from 10.1.10.10 to 10.200.5. 1.
D. It is a TCP session in the established state, from 10.1.10.10 to 10.200.5.1.
正解：C

質問 6：
Examine the following partial outputs from two routing debug commands; then answer the question below.
# get router info kernel
tab=254 vf=0 scope=0type=1 proto=11 prio=0 0.0.0.0/0.0.0.0/0->0.0.0.0/0 pref=0.0.0.0
gwy=10.200.1.254 dev=2(port1)
tab=254 vf=0 scope=0type=1 proto=11 prio=10 0.0.0.0/0.0.0.0/0->0.0.0.0/0 pref=0.0.0.0
gwy=10.200.2.254 dev=3(port2)
tab=254 vf=0 scope=253type=1 proto=2 prio=0 0.0.0.0/0.0.0.0/.->10.0.1.0/24 pref=10.0.1.254
gwy=0.0.0.0 dev=4(port3)
# get router info routing-table all s*0.0.0.0/0 [10/0] via 10.200.1.254, portl [10/0] via 10.200.2.254, port2, [10/0] dO.0.1.0/24 is directly connected, port3 dO.200.1.0/24 is directly connected, portl d0.200.2.0/24 is directly connected, port2
Which outbound interface or interfaces will be used by this FortiGate to route web traffic from internal users to the Internet?
A. port3.
B. port2.
C. port!
D. Both portl and port2.
正解：B

質問 7：
An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage. However, after the changes, one network application started to have problems. During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before the arrival of the SYN/ACKs. When the SYN/ACK packets arrive to the FortiGate, the unit has already deleted the respective sessions. Which TCP session timer must be increased to fix this problem?
A. TCP time wait.
B. TCP session time to live.
C. TCP half open.
D. TCP half close.
正解：C
解説: (Topexam メンバーにのみ表示されます)