Cuestiones
ayuda
option
Mi Daypo

TEST BORRADO, QUIZÁS LE INTERESEFortinet NSE7_EFW-6.2

COMENTARIOS ESTADÍSTICAS RÉCORDS
REALIZAR TEST
Título del test:
Fortinet NSE7_EFW-6.2

Descripción:
Fortinet NSE7_EFW-6.2

Autor:
AVATAR

Fecha de Creación:
13/03/2021

Categoría:
Informática

Número preguntas: 49
Comparte el test:
Facebook
Twitter
Whatsapp
Comparte el test:
Facebook
Twitter
Whatsapp
Últimos Comentarios
No hay ningún comentario sobre este test.
Temario:
Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.) A. IPS failopen B. mem failopen C. AV failopen D. UTM failopen.
Refer to the exhibit, which contains the partial output of a diagnose command. Based on the output, which two statements are correct? (Choose two.) A. Anti-replay is enabled. B. DPD is disabled. C. Remote gateway IP is 10.200.4.1. D. Quick mode selectors are disabled.
Refer to the exhibit, which contains the output of a diagnose command. Which two statements regarding the output in the exhibit are true? (Choose two.) A. FortiGate will probe 121.111.236.179 every fifteen minutes for a response. B. Servers with a negative TZ value are experiencing a service outage. C. Servers with the D flag are considered to be down. D. FortiGate used 209.222.147.36 as the initial server to validate its contract.
Which two statements about application layer test commands are true? (Choose two.) A. They are used to filter real-time debugs. B. They display real-time application debugs. C. Some of them can be used to restart an application. D. Some of them display statistics and configuration information about a feature or process.
Refer to the exhibits, which contain configuration on FortiGate and partial session information. All traffic to the Internet currently egresses from port1. The exhibit shows partial session information for Internet traffic from a user on the internal network. If the priority on route ID 1 were changed from 5 to 20, what would happen to traffic matching that user's session? A. The session would remain in the session table, but its traffic would now egress from both port1 and port2. B. The session would remain in the session table, and its traffic would still egress from port1. C. The session would remain in the session table, and its traffic would start to egress from port2. D. The session would be deleted, so the client would need to start a new session.
Which three conditions are required for two FortiGate devices to form an OSP adjacency? (Choose three.) A. OSPF costs match B. OSPF peer IDs match C. Hello and dead intervals match D. OSPF IP MTUs match E. IP addresses are in the same subnet.
Which two statements about bulk configuration changes using FortiManager CLI scripts are correct? (Choose two.) A. When executed on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate. B. When executed on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate. C. When executed on the All FortiGate in ADOM, changes are automatically installed without creating a new revision history. D. When executed on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.
Refer to the exhibit, which contains a partial output of an IKE real-time debug. Based on the debug output, which phase-1 setting is enabled in the configuration of this VPN? A. auto-discovery-receiver B. auto-discovery-forwarder C. auto-discovery-sender D. auto-discovery-shortcut.
What is the diagnose test application ipsmonitor 99 command used for? A. To enable IPS bypass mode B. To provide information regarding IPS sessions C. To disable the IPS engine D. To restart all IPS engines and monitors.
Refer to the exhibit, which contains a session table entry. Which statement about FortiGate inspection of this session is true? A. FortiGate applied proxy-based inspection. B. FortiGate applied flow-based NGFW policy-based inspection. C. FortiGate applied flow-based inspection. D. FortiGate forwarded this session without any inspection.
Refer to the exhibit, which contains the output of a debug command. Which two statements about the exhibit are true? (Choose two.) A. The local FortiGate OSPF router ID is 0.0.0.4. B. The local FortiGate is the backup designated router. C. In the network connected to port4, two OSPF routers are down. D. Port4 is connected to the OSPF backbone area.
Refer to the exhibit, which contains the output of diagnose sys session stat. Which two statements about the output shown are correct? (Choose two.) A. No sessions have been deleted because of memory pages exhaustion. B. There are 0 ephemeral sessions. C. There are 168 TCP sessions waiting to complete the three-way handshake. D. All the sessions in the session table are TCP sessions.
Refer to the exhibit, which contains central management configuration. Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage? A. 10.0.1.242 B. 10.0.1.244 C. Public FortiGuard servers D. 10.0.1.240.
Refer to the exhibit, which contains the output of diagnose sys session list. If the HA ID for the primary unit is zero (0), which statement about the output is true? A. This session cannot be synced with the slave unit. B. The inspection of this session has been offloaded to the slave unit. C. The master unit is processing this traffic. D. This session is for HA heartbeat traffic.
Refer to the exhibit, which contains the partial output of an IKE real-time debug. Why did the tunnel not come up? A. The pre-shared keys do not match B. The remote gateway phase 1 configuration does not match the local gateway phase 1 configuration. C. The remote gateway phase 2 configuration does not match the local gateway phase 2 configuration. D. The remote gateway is using aggressive mode and the local gateway is configured to use main mode.
An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link-failed-signal to fix the problem. Which statement about this command is true? A. It forces the former primary device to shut down all its non-heartbeat interfaces for one second while the failover occurs. B. It disables all the non-heartbeat interfaces in all the HA members for two seconds after a failover. C. It sends a link failed signal to all connected devices. D. It sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.
What does the dirty flag mean in a FortiGate session? A. The session must be removed from the former primary unit after an HA failover. B. Traffic has been blocked by the antivirus inspection. C. Traffic has been identified as from an application that is not allowed. D. The next packet must be re-evaluated against the firewall policies.
Refer to the exhibit, which contains partial outputs from two routing debug commands. Which outbound interface will FortiGate use to route web traffic from internal users to the Internet? A. port3 B. port2 C. port1 D. Both port1 and port2.
Refer to the exhibit, which contains the output of a debug command. Which statement about this FortiGate is correct? A. It is currently in system conserve mode because of high CPU usage. B. It is currently in extreme conserve mode because of high memory usage. C. It is currently in proxy conserve mode because of high memory usage. D. It is currently in memory conserve mode because of high memory usage. .
How does FortiManager handle FortiGate requests from FortiGate devices, when it is configured as a local FDS? A. FortiManager will respond to update requests only from a managed device. B. FortiManager can download and maintain local copies of FortiGuard databases. C. FortiManager supports only FortiGuard push update to managed devices. D. FortiManager does not support web filter rating requests.
Refer to the exhibit, which contains the output of a BGP debug command. Which statement about the exhibit is true? A. The local router has received a total of three BGP prefixes from all peers. B. The local router has not established a TCP session with 100.64.3.1. C. Since the counters were last reset, the 10.200.3.1 peer has never been down. D. The local router BGP state is OpenConfirm with the 10.127.0.75 peer. .
Refer to the exhibit, which contains the output of a web filtering diagnose command. Which statement explains why the cache statistics are all zeros? A. The FortiGate web filter cache is disabled in the FortiGate configuration. B. FortiGate is using flow-based inspection which does not use the cache. C. The administrator has reallocated the cache memory to a separate process. D. There are no users making web requests. .
An administrator wants to capture ESP traffic between two FortiGate devices using the built-in sniffer. If the administrator knows that there is no NAT device located between both FortiGate devices, which command should the administrator execute? A. diagnose sniffer packet any "˜esp' B. diagnose sniffer packet any "˜udp port 4500' C. diagnose sniffer packet any "˜udp port 500' D. diagnose sniffer packet any "˜tcp port 500 or tcp port 4500'.
Which two conditions must be met for a statistic route to be active in the routing table? (Choose two.) A. The link health monitor (if configured) is up. B. There is no other route, to the same destination, with a higher distance. C. The outgoing interface is up. D. The next-hop IP address is up.
When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filter web requests when the client browser does not provide the server name indication (SNI) extension? A. FortiGate uses the requested URL from the user's web browser. B. FortiGate uses the CN information from the Subject field in the server certificate. C. FortiGate blocks the request without any further inspection. D. FortiGate switches to the full SSL inspection method to decrypt the data.
Refer to the exhibit, which contains the output of a real-time debug. Which statement regarding this output is true? A. FortiGate found the requested URL in its local cache. B. The requested URL belongs to category ID 52. C. The client hostname is training.fortinet.com. D. This web request was inspected using the root web filter profile.
Which two tasks are automated using the Install Wizard on FortiManager? (Choose two.) A. Import policy packages from managed devices. B. Preview pending configuration changes for managed devices. C. Add devices to FortiManager. D. Import interface mappings from managed devices. E. Install configuration changes to managed devices.
Refer to the exhibit, which contains a partial routing table. Assuming all the appropriate firewall policies are configured, which two pings will FortiGate route? (Choose two.) A. Source IP address: 10.72.3.52, Destination IP address: 10.1.0.254 B. Source IP address: 10.73.9.10, Destination IP address: 10.72.3.15 C. Source IP address: 10.10.4.24, Destination IP address: 10.72.3.20 D. Source IP address: 10.1.0.10, Destination IP address: 10.64.1.52.
Refer to the exhibit, which contains a TCL script configuration on FortiManager. An administrator has configured the TCL script on FortiManager, but failed to apply any changes to the managed device after being executed. Why did the TCL script fail to make any changes to the managed device? A. Changes in an interface configuration can only be done by CLI script. B. The TCL script must start with #include <>. C. Incomplete commands are ignored in TCL scripts. D. The TCL command run_cmd has not been created.
Refer to the exhibit, which contains the partial output of an IKE real-time debug. Which two statements about this debug output are correct? (Choose two.) A. The initiator has provided remote as its IPsec peer ID. B. The negotiation is using AES128 encryption with CBC hash. C. The remote gateway IP address is 10.0.0.1. D. It shows a phase 1 negotiation.
Which two statements about FortiManager are true when it is deployed as a local FDS? (Choose two.) A. It caches available firmware updates for unmanaged devices. B. It provides VM license validation services. C. It can be configured as an update server, or a rating server, but not both. D. It supports rating requests from both managed and unmanaged devices.
Refer to the exhibit, which contains a CLI script configuration on FortiManager. An administrator has configured the CLI script on FortiManager, which failed to apply any changes to the managed device after being executed. Why did the script not make any changes to the managed device? A. There is an existing route with a lower priority value. B. CLI scripts will add objects only if they are referenced by policies. C. Commands that start with the #sign are not executed. D. Static routes can only be added using TCL scripts.
Refer to the exhibit, which contains the output of a BGP debug command. Which statement explains why the state of the 10.200.3.1 peer is Connect? A. The local router has received the BGP prefixes from the remote peer. B. The local router is receiving the BGP keepalives from the peer, but it has not received a BGP prefix yet. C. The TCP session to 10.200.3.1 has not completed the 3-way handshake. D. The local router is receiving BGP keepalives from the remote peer, but the local peer has not received the OpenConfirm yet.
Refer to the exhibit, which contains a session entry. Which statement about this session is true? A. It is a TCP session in CLOSE_WAIT state from 10.1.10.10 to 10.200.1.1. B. It is a TCP session in ESTABLISHED state from 10.1.10.10 to 10.200.5.1. C. It is an ICMP session from 10.1.10.10 to 10.200.5.1. D. It is an ICMP session from 10.1.10.10 to 10.200.1.1.
Refer to the exhibit, which contains the output of get system ha status. Which two statements about the output are true? (Choose two.) A. The slave configuration is synchronized with the master. B. port7 is used as the HA heartbeat on all devices in the cluster. C. Master is selected based on the priority configured under config system ha. D. The HA management IP is 169.254.0.2.
Refer to the exhibit, which contains a screenshot of some phase-1 settings. The VPN is not up. To diagnose, the administrator enters the following CLI commands: However, the IKE real-time debug does not show any output. Why? A. The log-filter setting was set incorrectly. The VPN traffic does not match this filter. B. The administrator must enable the following real-time debug: diagnose debug application ipsec ""1. C. The debug output only shows pre-shared key, encryption, and authentication mismatch(es). D. The debug shows only error messages. If there is no output, then phase-1 and phase-2 configurations are matching.
Which statement about memory conserve mode is true? A. A FortiGate exits conserve mode when the configured memory use threshold reaches yellow. B. A FortiGate starts dropping all the new and old sessions when the configured memory use threshold reaches extreme. C. A FortiGate enters conserve mode when the configured memory use threshold reaches red. D. A FortiGate starts dropping new sessions when the configured memory use thresholds reaches red. .
Refer to the exhibit, which contains output of diagnose vpn tunnel list. Which command will capture ESP traffic for the VPN named DialUp_0? A. diagnose sniffer packet any "˜port 500' B. diagnose sniffer packet any "˜host 10.0.10.10' C. diagnose sniffer packet any "˜ESP' D. diagnose sniffer packet any "˜port 4500'.
Refer to the exhibit, which contains a partial web filter profile configuration. Which action will FortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage? A. FortiGate will exempt the connection based on the Web Content Filter configuration. B. FortiGate will block the connection as an invalid URL. C. FortiGate will block the connection based on the URL Filter configuration. D. FortiGate will allow the connection based on the FortiGuard category based filter configuration.
Refer to the exhibit, which contains the output of a diagnose command. Which statement regarding the Weight value is true? A. It determines which FortiGuard server is used for license validation. B. Its initial value is statically set to 10. C. Its value is incremented with each packet lost. D. Its initial value is calculated based on the round trip delay (RTT).
Refer to the exhibit, which contains the partial output of an IKE real-time debug. The administrator does not have access to the remote gateway. Based on the debug output, which configuration change can the administrator make to the local gateway to resolve the phase 1 negotiation error? A. Change phase 1 encryption to 3DES and authentication to SHA256. B. Change phase 1 encryption to 3DES and authentication to CBC. C. Change phase 1 encryption to AESCBC and authentication to SHA128. D. Change phase 1 encryption to AES128 and authentication to SHA512.
In which two states is a given session categorized as ephemeral? (Choose two.) A. A TCP session waiting for FIN ACK. B. A TCP session waiting to complete the three-way handshake. C. A UDP session with packets sent and received. D. A UDP session with only one packet received.
Refer to the exhibit, which contains a partial output of an IKE real-time debug. Based on the debug output, which phase-1 setting is enabled in the configuration of this VPN? A. auto-discovery-receiver B. auto-discovery-forwarder C. auto-discovery-sender D. auto-discovery-shortcut.
Which statement describes IPS adaptive scanning? A. Downloads signatures on demand from FDS based on scanning requirements. B. Determines when it is secure enough to stop scanning session traffic. C. Determines the optimal number of IPS engines required based on system load. D. Choose a matching algorithm based on the type of inspection being performed.
Refer to the exhibit, which contains the output of a debug command. Which two statements about the exhibit are true? (Choose two.) A. The OSPF routers with the IDS 0.0.0.69 and 0.0.0.117 are both designated routers for the wan1 network. B. The interface ToRemote is a point-to-point OSPF network. C. The local ForitGate is the backup designated router for the wan1 network. D. The OSPF router with the ID 0.0.0.2 is the designated router for the ToRemote network.
Which configuration can be used to reduce the number of BGP sessions in an IBGP network? A. Next-hop-self B. Route reflector C. Neighbor group D. Neighbor range.
Refer to the exhibit, which contains partial outputs from two routing debug commands. Why is the port2 default route not in the second command's output? A. It has a lower priority value that the default route using port1. B. It has a higher priority value than the default route using port1. C. It is disabled in the FortiGate configuration. D. It has a higher distance than the default route using port1.
Refer to the exhibit, which contains the output of a diagnose command. Which two statements about the output are true? (Choose two.) A. This is an expected session created by a session helper. B. This is an expected session created by an application control profile. C. Traffic in the original direction (coming from the IP address 10.171.121.38) will be routed to the next-hop IP address 10.0.1.10. D. Traffic in the original direction (coming from the IP address 10.171.121.38) will be routed to the next-hop IP address 10.200.1.1.
Refer to the exhibits, which contain configuration on FortiGate and partial session information. All traffic to the Internet currently egresses from port1. The exhibit shows partial session information for Internet traffic from a user on the internal network. If the priority on route ID 1 were changed from 5 to 20, what would happen to traffic matching that user's session? A. The session would remain in the session table, but its traffic would now egress from both port1 and port2. B. The session would remain in the session table, and its traffic would still egress from port1. C. The session would remain in the session table, and its traffic would start to egress from port2. D. The session would be deleted, so the client would need to start a new session.
Denunciar test Consentimiento Condiciones de uso