Fortinet NSE7_EFW-6.4 問題集

質問 1：
What global configuration setting changes the behavior for content-inspected traffic while FortiGate is in system conserve mode?
A. av-failopen
B. mem-failopen
C. ips-failopen
D. utm-failopen
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
What configuration changes can reduce the memory utilization in a FortiGate? (Choose two.)
A. Increase the FortiGuard cache time to live.
B. Reduce the maximum file size to inspect.
C. Increase the TCP session timers.
D. Reduce the session time to live.
正解：B,D

質問 3：
What is the purpose of an internal segmentation firewall (ISFW)?
A. It inspects incoming traffic to protect services in the corporate DMZ.
B. It is an all-in-one security appliance that is placed at remote sites to extend the enterprise network.
C. It splits the network into multiple security segments to minimize the impact of breaches.
D. It is the first line of defense at the network perimeter.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Which of the following conditions must be met for a static route to be active in the routing table? (Choose three.)
A. The outgoing interface is up.
B. The next-hop IP address is up.
C. The next-hop IP address belongs to one of the outgoing interface subnets.
D. There is no other route, to the same destination, with a higher distance.
E. The link health monitor (if configured) is up.
正解：A,C,E
解説: (Topexam メンバーにのみ表示されます)

質問 5：
View the exhibit, which contains the output of a web diagnose command, and then answer the question below.

Which one of the following statements explains why the cache statistics are all zeros?
A. The FortiGuard web filter cache is disabled in the FortiGate's configuration.
B. FortiGate is using a flow-based web filter and the cache applies only to proxy-based inspection.
C. The administrator has reallocated the cache memory to a separate process.
D. There are no users making web requests.
正解：A

質問 6：
Examine the output of the 'get router info ospf interface' command shown in the exhibit; then answer the question below.

Which statements are true regarding the above output? (Choose two.)
A. Two OSPF routers are down in the port4 network.
B. The local FortiGate has been elected as the OSPF backup designated router.
C. The port4 interface is connected to the OSPF backbone area.
D. There are at least 5 OSPF routers connected to the port4 network.
正解：C,D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
View the exhibit, which contains the output of a diagnose command, and the answer the question below.

Which statements are true regarding the Weight value?
A. Its initial value is calculated based on the round trip delay (RTT).
B. Its initial value is statically set to 10.
C. Its value is incremented with each packet lost.
D. It determines which FortiGuard server is used for license validation.
正解：C