Fortinet NSE7_EFW-6.4 問題集

質問 1：
Refer to the exhibit, which contains partial output from an IKE real-time debug.

Based on the debug output, which phase 1 setting is enabled in the configuration of this VPN?
A. auto-discovery-receiver
B. auto-discovery-forwarder
C. auto-discovery-shortcut
D. auto-discovery-sender
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Examine the following routing table and BGP configuration; then answer the question below.

TheBGP connection is up, but the local peer is NOT advertising the prefix 192.168.1.0/24. Which configuration change will make the local peer advertise this prefix?
A. Enable the redistribution of static routers into BGP.
B. Disable the setting network-import-check.
C. Enable the setting ebgp-multipath.
D. Enable the redistribution of connected routers into BGP.
正解：B

質問 3：
View the exhibit, which contains a screenshot of some phase-1 settings, and then answer the question below.

The VPN is up, and DPD packets are being exchanged between both IPsec gateways; however, traffic cannot pass through the tunnel. To diagnose, the administrator enters these CLI commands:

However, the IKE real time debug does not show any output. Why?
A. The debug shows only error messages. If there is no output, then the tunnel is operating normally.
B. The debug output shows phase 1 negotiation only. After that, the administrator must enable the following real time debug: diagnose debug application ipsec -1.
C. The debug output shows phases 1 and 2 negotiations only. Once the tunnel is up, it does not show any more output.
D. The log-filter setting was set incorrectly. The VPN's traffic does not match this filter.
正解：D

質問 4：
Refer to the exhibits.

Which contain the partial configurations of two VPNs on FortiGate.
An administrator has configured two VPNs for two different user groups. Users who are in the Users-2 group are not able to connect to the VPN. After running a diagnostics command, the administrator discovered that FortiGate is not matching the user-2 VPN for members of the Users-2 group.
Which two changes must administrator make to fix the issue? (Choose two.)
A. Set up specific peer IDs on both VPNs.
B. Change to aggressive mode on both VPNs.
C. Enable Mode Config on both VPNs.
D. Use different pre-shared keys on both VPNs
正解：A,B

質問 5：
Refer to the exhibit, which contains the debug output of diagnose dvm device list.

Which two statements about the output shown in the exhibit are correct? (Choose two.)
A. The FortiGate configuration is in sync with latest running revision history.
B. There are pending device-level changes yet to be installed on Local-FortiGate.
C. ADOMs are disabled on the FortiManager
D. The policy package has been modified for Local-FortiGate.
正解：A,B