Fortinet NSE7_EFW-7.0 問題集

質問 1：
An LDAP user cannot authenticate against a FortiGate device. Examine the real time debug output shown in the exhibit when the user attempted the authentication; then answer the question below.


Based on the output in the exhibit, what can cause this authentication problem?
A. The FortiGate has been configured with the wrong authentication schema.
B. User student is not found in the LDAP server.
C. User student is using a wrong password.
D. The FortiGate has been configured with the wrong password for the LDAP administrator.
正解：B

質問 2：
A FortiGate is configured as an explicit web proxy. Clients using this web proxy are reposting DNS errors when accessing any website. The administrator executes the following debug commands and observes that the n-dns-timeout counter is increasing:

What should the administrator check to fix the problem?
A. The connectivity between the client workstations and the DNS server.
B. The connectivity between the FortiGate unit and the DNS server.
C. That DNS traffic from client workstations is allowed by the explicit web proxy policies.
D. That DNS service is enabled in the explicit web proxy interface.
正解：B

質問 3：
The CLI command set intelligent-mode <enable | disable> controls the IPS engine's adaptive scanning behavior. Which of the following statements describes IPS adaptive scanning?
A. Choose a matching algorithm based on available memory and the type of inspection being performed.
B. Downloads signatures on demand from FDS based on scanning requirements.
C. Determines when it is secure enough to stop scanning session traffic.
D. Determines the optimal number of IPS engines required based on system load.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
View the exhibit, which contains the output of a BGP debug command, and then answer the question below.

Which of the following statements about the exhibit are true? (Choose two.)
A. The local BGP peer has not established a TCP session to the BGP peer 10.200.3.1.
B. For the peer 10.125.0.60, the BGP state of is Established.
C. Since the BGP counters were last reset, the BGP peer 10.200.3.1 has never been down.
D. The local BGP peer has received a total of three BGP prefixes.
正解：A,B

質問 5：
Refer to the exhibit, which shows the output of a web filtering diagnose command.

Which configuration change would result in non-zero results in the cache statistics section?
A. set ngfw-mode policy-based under config system settings
B. set webfilter-cache enable under config system fortiguard
C. set webfilter-force-off disable under config system fortiguard
D. set server-type rating under config system central-management
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Examine the output of the 'get router info bgp summary' command shown in the exhibit; then answer the question below.

Which statement can explain why the state of the remote BGP peer 10.200.3.1 is Connect?
A. The TCP session for the BGP connection to 10.200.3.1 is down.
B. The local peer is receiving the BGP keepalives from the remote peer but it has not received any BGP prefix yet.
C. The local peer is receiving the BGP keepalives from the remote peer but it has not received the OpenConfirm yet.
D. The local peer has received the BGP prefixed from the remote peer.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Refer to the exhibit, which shows a partial web filter profile configuration.

Which action will FortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?
A. FortiGate will allow the connection, based on the URL Filter configuration.
B. FortiGate will block the connection as an invalid URL.
C. FortiGate will block the connection, based on the FortiGuard category based filter configuration.
D. FortiGate will exempt the connection, based on the Web Content Filter configuration.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 8：
View the exhibit, which contains the output of get sys ha status, and then answer the question below.

Which statements are correct regarding the output? (Choose two.)
A. The HA management IP is 169.254.0.2.
B. port 7 is used the HA heartbeat on all devices in the cluster.
C. The slave configuration is not synchronized with the master.
D. Master is selected because it is the only device in the cluster.
正解：B,C

質問 9：
Which two statements about the Security Fabric are true? (Choose two.)
A. All FortiGate devices in the Security Fabric must have bidirectional FortiTelemetry connectivity.
B. FortiGate uses FortiTelemetry protocol to communicate with FortiAnalyzer.
C. Only the root FortiGate collects network information and forwards it to FortiAnalyzer.
D. Branch FortiGate devices must be configured first.
正解：A,B