Fortinet NSE7_EFW-7.0 問題集

質問 1：
View the exhibit, which contains the output of diagnose sys session list, and then answer the question below.

If the HA ID for the primary unit is zero (0), which statement is correct regarding the output?
A. This session is synced with the slave unit.
B. This session is for HA heartbeat traffic.
C. The inspection of this session has been offloaded to the slave unit.
D. This session cannot be synced with the slave unit.
正解：A

質問 2：
View the global IPS configuration, and then answer the question below.

Which of the following statements is true regarding this configuration?
A. FortiGate will spawn IPS engine instances based on the system load.
B. IPS will scan every byte in every session.
C. IPS will use the faster matching algorithm which is only available for units with more than 4 GB memory.
D. New packets will be passed through without inspection if the IPS socket buffer runs out of memory.
正解：B

質問 3：
View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.

Why didn't the tunnel come up?
A. The remote gateway's phase 1 configuration does not match the local gateway's phase 1 configuration.
B. The pre-shared keys do not match.
C. The remote gateway is using aggressive mode and the local gateway is configured to use man mode.
D. The remote gateway's phase 2 configuration does not match the local gateway's phase 2 configuration.
正解：A

質問 4：
Examine the output of the 'diagnose sys session list expectation' command shown in the exhibit; than answer the question below.

Which statement is true regarding the session in the exhibit?
A. It is for traffic originated from the FortiGate.
B. It was created by a session helper or ALG.
C. It is for management traffic terminating at the FortiGate.
D. It was created by the FortiGate kernel to allow push updates from FotiGuard.
正解：B

質問 5：
Refer to the exhibit, which shows partial outputs from two routing debug commands.

Why is the port2 default route not in the second command output?
A. The port2 interface is disabled in the FortiGate configuration.
B. The port1 default route has a lower distance than the default route using port2.
C. The port1 default route has a lower priority value than the default route using port2.
D. The port1 default route has a higher priority value than the default route using port2.
正解：B

質問 6：
Refer to the exhibit, which contains partial output from an IKE real-time debug.

Which two statements about this debug output are correct? (Choose two.)
A. It shows a phase 1 negotiation.
B. The negotiation is using AES128 encryption with CBC hash.
C. The initiator provided remote as its IPsec peer ID.
D. The remote gateway IP address is 10.0.0.1.
正解：A,C

質問 7：
What are two functions of automation stitches? (Choose two.)
A. Automation stitches can be created to run diagnostic commands and attach the results to an email message when CPU or memory usage exceeds specified thresholds.
B. Automation stitches can be configured on any FortiGate device in a Security Fabric environment.
C. An automation stitch configured to execute actions sequentially can take parameters from previous actions as input for the current action.
D. An automation stitch configured to execute actions in parallel can be set to insert a specific delay between actions.
正解：A,C
解説: (Topexam メンバーにのみ表示されます)

質問 8：
View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.

Which statements about this debug output are correct? (Choose two.)
A. It shows a phase 1 negotiation.
B. The initiator has provided remote as its IPsec peer ID.
C. The negotiation is using AES128 encryption with CBC hash.
D. The remote gateway IP address is 10.0.0.1.
正解：A,B

質問 9：
Refer to the exhibit, which contains the output of a BGP debug command.

Which statement about the exhibit is true?
A. The local router has not established a TCP session with 100.64.3.1.
B. The local router BGP state is OpenConfirm with the 10.127.0.75 peer.
C. Since the counters were last reset, the 10.200.3.1 peer has never been down.
D. The local router has received a total of three BGP prefixes from all peers.
正解：A