Fortinet NSE7_EFW-7.0 問題集

質問 1：
View the exhibit, which contains the output of a debug command, and then answer the question below.

Which one of the following statements about this FortiGate is correct?
A. It is currently in system conserve mode because of high CPU usage.
B. It is currently in proxy conserve mode because of high memory usage.
C. It is currently in extreme conserve mode because of high memory usage.
D. It is currently in memory conserve mode because of high memory usage.
正解：D

質問 2：
Refer to the exhibit, which shows a partial web filter profile configuration.

Which action will FortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?
A. FortiGate will allow the connection, based on the URL Filter configuration.
B. FortiGate will block the connection as an invalid URL.
C. FortiGate will block the connection, based on the FortiGuard category based filter configuration.
D. FortiGate will exempt the connection, based on the Web Content Filter configuration.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Refer to the exhibit, which contains a screenshot of some phase 1 settings.

The VPN is not up. To diagnose the issue, the administrator enters the following CLI commands to an SSH session on FortiGate: diagnose vpn ike log-filter dst-addr4 10.0.10.1 diagnose debug application ike -1 However, the IKE real-time debug does not show any output. Why?
A. The administrator must also run the command diagnose debug enable.
B. The log-filter setting is incorrect. The VPN traffic does not match this filter.
C. The administrator must enable the following real-time debug: diagnose debug application ipsec -1.
D. The debug shows only error messages. If there is no output, then the phase 1 and phase 2 configurations match.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 4：
An administrator has configured the following CLI script on FortiManager, which failed to apply any changes to the managed device after being executed.

Why didn't the script make any changes to the managed device?
A. CLI scripts will add objects only if they are referenced by policies.
B. Commands that start with the # sign are not executed.
C. Incomplete commands are ignored in CLI scripts.
D. Static routes can only be added using TCL scripts.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Refer to the exhibit, which shows partial outputs from two routing debug commands.

Which change must an administrator make on FortiGate to route web traffic from internal users to the internet, using ECMP?
A. Set the priority of the static default route using port1 to 10. Most Voted
B. Set the priority of the static default route using port2 to 1.
C. Set snat-route-change to enable.
D. Set preserve-session-route to enable.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Refer to the exhibit, which contains partial output from an IKE real-time debug.

Why did the tunnel not come up?
A. The local gateway has configured less secure encryption and hashing algorithms compared to the remote gateway.
B. The encapsulation method for phase 2 is set to none on local and remote gateways.
C. The Diffie-Hellman group does not match on the local and remote gateways.
D. The proposal ID does not match between local and remote gateways.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Which two statements about bulk configuration changes made using FortiManager CLI scripts are correct? (Choose two.)
A. When run on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.
B. When run on the All FortiGate in ADOM, changes are automatically installed without the creation of a new revision history.
C. When run on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate device.
D. When run on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate device.
正解：A,C

質問 8：
Which the following events can trigger the election of a new primary unit in a HA cluster? (Choose two.)
A. The FortiGuard license for the primary unit is updated.
B. A secondary unit is removed from the HA cluster.
C. One of the monitored interfaces in the primary unit is disconnected.
D. Primary unit stops sending HA heartbeat keepalives.
正解：C,D

質問 9：
Examine the following partial output from a sniffer command; then answer the question below.

What is the meaning of the packets dropped counter at the end of the sniffer?
A. Number of packets that matched the sniffer filter and were dropped by the FortiGate.
B. Number of total packets dropped by the FortiGate.
C. Number of packets that matched the sniffer filter but could not be captured by the sniffer.
D. Number of packets that didn't match the sniffer filter.
正解：C
解説: (Topexam メンバーにのみ表示されます)