Fortinet NSE7_EFW-7.0 問題集

質問 1：
View the global IPS configuration, and then answer the question below.

Which of the following statements is true regarding this configuration?
A. FortiGate will spawn IPS engine instances based on the system load.
B. IPS will scan every byte in every session.
C. IPS will use the faster matching algorithm which is only available for units with more than 4 GB memory.
D. New packets will be passed through without inspection if the IPS socket buffer runs out of memory.
正解：B

質問 2：
What does the dirty flag mean in a FortiGate session?
A. Traffic has been blocked by the antivirus inspection.
B. The session must be removed from the former primary unit after an HA failover.
C. The next packet must be re-evaluated against the firewall policies.
D. Traffic has been identified as from an application that is not allowed.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Which ADVPN configuration must be configured using a script on FortiManager, when using VPN Manager to manage FortiGate VPN tunnels?
A. Enable AD-VPN in IPsec phase 1
B. Configure IP addresses on IPsec virtual interfaces
C. Set protected network to all
D. Disable add-route on hub
正解：A

質問 4：
In which two states is a given session categorized as ephemeral? (Choose two.)
A. A UDP session with only one packet received
B. A TCP session waiting for the SYN ACK
C. A TCP session waiting for FIN ACK
D. A UDP session with packets sent and received
正解：A,B

質問 5：
Which statement about memory conserve mode is true?
A. A FortiGate starts dropping new sessions when the configured memory use threshold reaches red
B. A FortiGate enters conserve mode when the configured memory use threshold reaches red
C. A FortiGate exits conserve mode when the configured memory use threshold reaches yellow.
D. A FortiGate starts dropping all the new and old sessions when the configured memory use threshold reaches extreme.
正解：B

質問 6：
Which two statements about the Security Fabric are true? (Choose two.)
A. All FortiGate devices in the Security Fabric must have bidirectional FortiTelemetry connectivity.
B. FortiGate uses FortiTelemetry protocol to communicate with FortiAnalyzer.
C. Only the root FortiGate collects network information and forwards it to FortiAnalyzer.
D. Branch FortiGate devices must be configured first.
正解：A,B

質問 7：
View the IPS exit log, and then answer the question below.
# diagnose test application ipsmonitor 3
ipsengine exit log"
pid = 93 (cfg), duration = 5605322 (s) at Wed Apr 19 09:57:26 2017
code = 11, reason: manual
What is the status of IPS on this FortiGate?
A. IPS daemon experienced a crash.
B. There are communication problems between the IPS engine and the management database.
C. All IPS-related features have been disabled in FortiGate's configuration.
D. IPS engine memory consumption has exceeded the model-specific predefined value.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 8：
The logs in a FSSO collector agent (CA) are showing the following error:
failed to connect to registry: PIKA1026 (192.168.12.232)
What can be the reason for this error?
A. The remote registry service is not running in the workstation 192.168.12.232.
B. The CA cannot reach the FortiGate with the IP address 192.168.12.232.
C. The CA cannot resolve the name of the workstation.
D. The FortiGate cannot resolve the name of the workstation.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 9：
Refer to the exhibit, which contains partial output from an IKE real-time debug.

Why did the tunnel not come up?
A. The local gateway has configured less secure encryption and hashing algorithms compared to the remote gateway.
B. The encapsulation method for phase 2 is set to none on local and remote gateways.
C. The Diffie-Hellman group does not match on the local and remote gateways.
D. The proposal ID does not match between local and remote gateways.
正解：A
解説: (Topexam メンバーにのみ表示されます)