Fortinet NSE7_EFW-7.2 問題集

質問 1：
How are bulk configuration changes made using FortiManager CLI scripts? (Choose two.)
A. When run on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.
B. When run on the Policy Package, ADOM database, you must use the installation wizard to apply the changes to the managed FortiGate device.
C. When run on the Device Database, changes are applied directly to the managed FortiGate device.
D. When run on the All FortiGate in ADOM, changes are automatically installed without the creation of a new revision history.
正解：A,B

質問 2：
Refer to the exhibit, which contains a partial OSPF configuration.

What can you conclude from this output?
A. The restarting router sends gratuitous ARP for 30 seconds.
B. FortiGate restarts if the topology changes.
C. Neighbors maintain communication with the restarting router.
D. The router sends grace LSAs before it restarts.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Exhibit.

Refer to the exhibit, which contains an active-active toad balancing scenario.
During the traffic flow the primary FortiGate forwards the SYN packet to the secondary FortiGate.
What is the destination MAC address or addresses when packets are forwarded from the primary FortiGate to the secondary FortiGate?
A. Secondary physical MAC port2 then virtual MAC port2
B. Secondary physical MAC port1
C. Secondary virtual MAC port1 then physical MAC port1
D. Secondary virtual MAC port1
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Refer to the exhibit, which contains a partial BGP combination.

You want to configure a loopback as the OGP source.
Which two parameters must you set in the BGP configuration? (Choose two)
A. ebgp-enforce-multihop
B. recursive-next-hop
C. ibgp-enfoce-multihop
D. update-source
正解：A,D
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Which statement about network processor (NP) offloading is true?
A. For TCP traffic FortiGate CPU offloads the first packets of SYN/ACK and ACK of the three-way handshake to NP
B. You can disable the NP for each firewall policy using the command np-acceleration st to loose.
C. The NP checks the session key or IPSec SA
D. The NP provides IPS signature matching
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Which statement about ADVPN is true?
A. It supports only on single hub-and spoke architecture
B. lt is a combination of hub-and spoke and full-mesh topologies
C. lt only uses BGP for dynamic routing
D. It requires all the devices must be on the same AS for inter-region ADVPN topology
正解：B

質問 7：
Refer to the exhibit, which shows device registration on FortiManager.

What can you conclude about the Spoke-1 and Spoke-2 configurations with respect to the information cond:
Modified (recent auto-updated)?
A. On NGFW-A, the configuration was changed and spokes are wailing for an autoupdate.
B. On both Spoke-1 and Spoke-2, the configuration was changed directly on the FortiGate device, and the changes were automatically retrieved by the device database.
C. Spoke-1 and Spoke-2 are sharing the same security policy configuration and the same policy package.
D. Based on the policy configuration on NGFW-1, the configuration on both spokes is modified and automatically updated.
正解：A

質問 8：


Refer to the exhibit, which shows information about an OSPF interface
What two conclusions can you draw from this command output? (Choose two.)
A. NGFW-1 forms neighbor adjacency only if other OSPF routers match the wait time of 40 seconds
B. NGFW-1 sends its LSA updates to 224.0.0.6 address
C. NGFW-1 sends its LSA updates to 224.0.0. 5 address
D. NGFW-1 forms neighbor adjacency only with DR and BDR router.
正解：B,D