Fortinet NSE7_EFW-6.4 問題集

質問 1：
Which statement is true regarding File description (FD) conserve mode?
A. Restarting the WAD process is required to leave FD conserve mode.
B. A FortiGate enters FD conserve mode when the amount of available description is less than 5%.
C. FD conserve mode affects all daemons running on the device.
D. IPS inspection is affected when FortiGate enters FD conserve mode.
正解：B

質問 2：
Refer to the exhibit, which contains the partial output of the get vpn ipsec tunnel details command.

Based on the output, which two statements are correct? (Choose two.)
A. Hub2Spoke1 is configured on interface wan2.
B. Anti-replay is disabled.
C. Phase 2 authentication is set to sha1 on both sides.
D. Hub2Spoke1 is a policy-based VPN.
正解：A,C

質問 3：
View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.

The administrator does not have access to the remote gateway. Based on the debug output, what configuration changes can the administrator make to the local gateway to resolve the phase 1 negotiation error?
A. Change phase 1 encryption to AES256 and authentication to SHA256.
B. Change phase 1 encryption to AES128 and authentication to SHA512.
C. Change phase 1 encryption to AESCBC and authentication to SHA2.
D. Change phase 1 encryption to 3DES and authentication to SHA128.
正解：A

質問 4：
View the exhibit, which contains a partial routing table, and then answer the question below.

Assuming all the appropriate firewall policies are configured, which of the following pings will FortiGate route? (Choose two.)
A. Source IP address 10.73.9.10, Destination IP address 10.72.3.15.
B. Source IP address 10.1.0.24, Destination IP address 10.72.3.20.
C. Source IP address 10.72.3.52, Destination IP address 10.1.0.254.
D. Source IP address 10.72.3.27, Destination IP address 10.1.0.52.
正解：C,D

質問 5：
Examine the output of the 'get router info bgp summary' command shown in the exhibit; then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)
A. The local BGP peer has received a total of 3 BGP prefixes.
B. BGP state of the peer 10.125.0.60 is Established.
C. BGP peer 10.200.3.1 has never been down since the BGP counters were cleared.
D. Local BGP peer has not received an OpenConfirm from 10.200.3.1.
正解：B,D

質問 6：
Which statement about the designated router (DR) and backup designated router (BDR) in an OSPF multi-access network is true?
A. BDR is responsible for forwarding link state information from one router to another.
B. FortiGate first checks the OSPF ID to elect a DR.
C. Only the DR receives link state information from non-DR routers.
D. Non-DR and non-BDR routers will form full adjacencies to DR and BDR only.
正解：D

質問 7：
View the exhibit, which contains a session entry, and then answer the question below.

Which statement is correct regarding this session?
A. It is an ICMP session from 10.1.10.10 to 10.200.5.1.
B. It is a TCP session in ESTABLISHED state from 10.1.10.10 to 10.200.5.1.
C. It is an ICMP session from 10.1.10.10 to 10.200.1.1.
D. It is a TCP session in CLOSE_WAIT state from 10.1.10.10 to 10.200.1.1.
正解：A