Fortinet NSE7 問題集

質問 1：
An administrator has configured the following CLI script on FortiManager, which failed to apply any changes to the managed device after being executed.

Why didn't the script make any changes to the managed device?
A. CLI scripts will add objects only if they are referenced by policies.
B. Commands that start with the # sign are not executed.
C. Incomplete commands are ignored in CLI scripts.
D. Static routes can only be added using TCL scripts.
正解：A

質問 2：
Which real time debug should an administrator enable to troubleshoot RADIUS authentication problems?
A. Diagnose authd console -log enable.
B. Diagnose debug application radius -1.
C. Diagnose radius console -log enable.
D. Diagnose debug application fnbamd -1.
正解：B

質問 3：
View the exhibit, which contains the output of a real-time debug, and then answer the question below.

Which of the following statements is true regarding this output? (Choose two.)
A. FortiGate found the requested URL in its local cache.
B. The requested URL belongs to category ID 52.
C. The web request was allowed by FortiGate.
D. This web request was inspected using the root web filter profile.
正解：A,B

質問 4：
An administrator added the following Ipsec VPN to a FortiGate configuration:
configvpn ipsec phasel -interface
edit "RemoteSite"
set type dynamic
set interface "portl"
set mode main
set psksecret ENC LCVkCiK2E2PhVUzZe
next
end
config vpn ipsec phase2-interface
edit "RemoteSite"
set phasel name "RemoteSite"
set proposal 3des-sha256
next
end
However, the phase 1 negotiation is failing. The administrator executed the IKF real time debug while attempting the Ipsec connection. The output is shown in the exhibit.


What is causing the IPsec problem in the phase 1 ?
A. The incoming IPsec connection is matching the wrong VPN configuration
B. The pre-shared key is wrong
C. NAT-T settings do not match
D. The phrase-1 mode must be changed to aggressive
正解：B

質問 5：
View the exhibit, which contains the output of a diagnose command, and the answer the question below.

Which statements are true regarding the Weight value?
A. Its initial value is calculated based on the round trip delay (RTT).
B. Its initial value is statically set to 10.
C. Its value is incremented with each packet lost.
D. It determines which FortiGuard server is used for license validation.
正解：C

質問 6：
The CLI command set intelligent-mode <enable | disable> controls the IPS engine's adaptive scanning behavior. Which of the following statements describes IPS adaptive scanning?
A. Choose a matching algorithm based on available memory and the type of inspection being performed.
B. Downloads signatures on demand from FDS based on scanning requirements.
C. Determines when it is secure enough to stop scanning session traffic.
D. Determines the optimal number of IPS engines required based on system load.
正解：A