Fortinet NSE7_EFW-6.0 問題集

質問 1：
View the IPS exit log, and then answer the question below.
# diagnose test application ipsmonitor 3
ipsengine exit log"
pid = 93 (cfg), duration = 5605322 (s) at Wed Apr 19 09:57:26 2017
code = 11, reason: manual
What is the status of IPS on this FortiGate?
A. IPS daemon experienced a crash.
B. There are communication problems between the IPS engine and the management database.
C. All IPS-related features have been disabled in FortiGate's configuration.
D. IPS engine memory consumption has exceeded the model-specific predefined value.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
An LDAP user cannot authenticate against a FortiGate device. Examine the real time debug output shown in the exhibit when the user attempted the authentication; then answer the question below.


Based on the output in the exhibit, what can cause this authentication problem?
A. The FortiGate has been configured with the wrong authentication schema.
B. User student is not found in the LDAP server.
C. User student is using a wrong password.
D. The FortiGate has been configured with the wrong password for the LDAP administrator.
正解：B

質問 3：
View the exhibit, which contains the output of a BGP debug command, and then answer the question below.

Which of the following statements about the exhibit are true? (Choose two.)
A. Since the counters were last reset; the 10.200.3.1 peer has never been down.
B. The local router has not established a TCP session with 100.64.3.1.
C. The local router's BGP state is Established with the 10.125.0.60 peer.
D. The local router has received a total of three BGP prefixes from all peers.
正解：B,C

質問 4：
An administrator wants to capture ESP traffic between two FortiGates using the built-in sniffer. If the administrator knows that there is no NAT device located between both FortiGates, what command should the administrator execute?
A. diagnose sniffer packet any 'udp port 500 or udp port 4500'
B. diagnose sniffer packet any 'udp port 500'
C. diagnose sniffer packet any 'udp port 4500'
D. diagnose sniffer packet any 'esp'
正解：D

質問 5：
Which of the following statements is true regarding a FortiGate configured as an explicit web proxy?
A. FortiGate limits the number of simultaneous sessions per explicit web proxy user The limit CAN be modified by the administrator
B. FortiGate limits the total number of simultaneous explicit web proxy users.
C. FortiGate limits the number of workstations that authenticate using the same web proxy user credentials.
This limit CANNOT be modified by the administrator.
D. FortiGate limits the number of simultaneous sessions per explicit web proxy user. This limit CANNOT be modified by the administrator.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Examine the following partial output from two system debug commands; then answer the question below.


Which of the following statements are true regarding the above outputs? (Choose two.)
A. Kernel indirectly accesses the low memory (LowTotal) through memory paging
B. The unit is in kernel conserve mode
C. The Cached value is always the Active value plus the Inactive value
D. The unit is running a 32-bit FortiOS
正解：C,D

質問 7：
View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.

Why didn't the tunnel come up?
A. The remote gateway's phase 1 configuration does not match the local gateway's phase 1 configuration.
B. The pre-shared keys do not match.
C. The remote gateway is using aggressive mode and the local gateway is configured to use man mode.
D. The remote gateway's phase 2 configuration does not match the local gateway's phase 2 configuration.
正解：A