Fortinet NSE7_EFW-7.0 問題集

質問 1：
Refer to the exhibit, which shows a session entry. Which statement about this session is true?

A. It is a TCP session in close_wait state, from 10. l. 10.10 to 10.200.1.1.
B. It is an ICMP session from 10.1.10.10 to 10.200.1.1.
C. It is an ICMP session from 10.1.10.10 to 10.200.5. 1.
D. It is a TCP session in the established state, from 10.1.10.10 to 10.200.5.1.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
An administrator has configured a FortiGate device with two VDOMs: root and internal. The administrator has also created and inter-VDOM link that connects both VDOMs. The objective is to have each VDOM advertise some routes to the other VDOM via OSPF through the inter-VDOM link. What OSPF configuration settings must match in both VDOMs to have the OSPF adjacency successfully forming? (Choose three.)
A. OSPF interface cost.
B. OSPF interface MTU.
C. OSPF interface area.
D. Router ID.
E. Interface subnet mask.
正解：B,C,E

質問 3：
A FortiGate has two default routes:

All Internet traffic is currently using port1. The exhibit shows partial information for one sample session of Internet traffic from an internal user:

What would happen with the traffic matching the above session if the priority on the first default route (IDd1) were changed from 5 to 20?
A. The session would remain in the session table, and its traffic would start to egress from port2.
B. The session would remain in the session table, but its traffic would now egress from both port1 and port2.
C. The session would remain in the session table, and its traffic would still egress from port1.
D. The session would be deleted, and the client would need to start a new session.
正解：C

質問 4：
Refer to the exhibit, which shows the output of a debug command.

What can be concluded from the debug command output?
A. There are more than two OSPF routers on the wan2 network.
B. The interface ToRemote is a broadcast OSPF network.
C. The OSPF router with the ID 0.0.0.69 has its OSPF priority set to 0.
D. The local FortiGate has a different MTU value from the OSPF router with ID 0.0.0.2, based on the state information.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Refer to the exhibit, which contains the partial output of a diagnose command.

Based on the output, which two statements are correct? (Choose two.)
A. DPD is disabled.
B. The remote gateway has quick mode selectors containing a destination subnet of 10.1.2.0/24.
C. Anti-replay is enabled.
D. The remote gateway IP is 10.200.5.1.
正解：B,C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator noticed that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link-failed-signal to fix the problem. Which statement is correct regarding this command?
A. Forces the former primary device to shut down all its non-heartbeat interfaces for one second while the failover occurs.
B. Sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.
C. Sends a link failed signal to all connected devices.
D. Disables all the non-heartbeat interfaces in all the HA members for two seconds after a failover.
正解：A

質問 7：
Refer to the exhibit, which shows partial outputs from two routing debug commands.

Which change must an administrator make on FortiGate to route web traffic from internal users to the internet, using ECMP?
A. Set the priority of the static default route using port1 to 10. Most Voted
B. Set the priority of the static default route using port2 to 1.
C. Set snat-route-change to enable.
D. Set preserve-session-route to enable.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 8：
Refer to the exhibit, which shows the output of diagnose sys session stat.

Which statement about the output shown in the exhibit is correct?
A. There are 166 TCP sessions waiting to complete the three-way handshake.
B. 162 sessions have been deleted because of memory page exhaustion.
C. All the sessions in the session table are TCP sessions.
D. There are two sessions that have not been removed in case of any out-of-order packets that arrive.
正解：D

質問 9：
Examine the output of the 'get router info ospf neighbor' command shown in the exhibit; then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.) Refer to the exhibit, which shows the output of a debug command.
Which statement about the output is true?
A. The OSPF router with the ID 0.0.0.2 is the designated router for the ToRemote network.
B. TheOSPF routers with the IDs 0.0.0.69 and 0.0.0.117 are both designated routers for the war. l network.
C. The interface ToRemote is a point-to-point OSPF network.
D. The local FortiGate is the designated router for the wan1 network.
正解：C
解説: (Topexam メンバーにのみ表示されます)