Fortinet NSE7_EFW-6.4 問題集

質問 1：
Four FortiGate devices configured for OSPF connected to the same broadcast domain. The first unit is elected as the designated router The second unit is elected as the backup designated router Under normal operation, how many OSPF full adjacencies are formed to each of the other two units?
A. 2
B. 3
C. 4
D. 1
正解：A

質問 2：
Examine the output from the BGP real time debug shown in the exhibit, then the answer the question below:

Which statements are true regarding the output in the exhibit? (Choose two.)
A. The state of the remote BGP peer will go to Connect after it confirms the received prefixes.
B. The state of the remote BGP peer is OpenConfirm.
C. Local BGP peer received a prefix for a default route.
D. BGP peers have successfully interchanged Open and Keepalive messages.
正解：C,D

質問 3：
What events are recorded in the crashlogs of a FortiGate device? (Choose two.)
A. A process crash.
B. Changes in the status of any of the FortiGuard licenses.
C. Configuration changes.
D. System entering to and leaving from the proxy conserve mode.
正解：A,D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filter web requests when the client browser does not provide the server name indication (SNI) extension?
A. FortiGate uses the requested URL from the user's web browser.
B. FortiGate blocks the request without any further inspection.
C. FortiGate switches to the full SSL inspection method to decrypt the data.
D. FortiGate uses the CN information from the Subject field in the server certificate.
正解：D

質問 5：
A FortiGate is rebooting unexpectedly without any apparent reason. What troubleshooting tools could an administrator use to get more information about the problem? (Choose two.)
A. Logs.
B. Policy monitor.
C. Crashlogs.
D. Firewall monitor.
正解：A,C

質問 6：
Refer to the exhibit, which shows a partial routing table.

Assuming all the appropriate firewall policies are configured, which two pings will FortiGate route? (Choose two.)
A. Source IPaddress: 10.10.4.24, Destination IPaddress: 10.72.3.20
B. Source IP address: 10.1.0.10. Destination IP address: 10.64.1.52
C. Source IPaddress: 10.72.3.52. Destination IP address: 10.1.0.254
D. Source IPaddress: 10.73.9.10, Destination IPaddress: 10.72.3.15
正解：B,C

質問 7：
Two independent FortiGate HA clusters are connected to the same broadcast domain. The administrator has reported that both clusters are using the same HA virtual MAC address. This creates a duplicated MAC address problem in the network. What HA setting must be changed in one of the HA clusters to fix the problem?
A. Gratuitous ARPs.
B. Session pickup.
C. Group name.
D. Group ID.
正解：D
解説: (Topexam メンバーにのみ表示されます)