FCSS_EFW_AD-7.4 試験問題と解答 - 模擬練習 - 練習問題・模擬試験

Question No : 1
View the exhibit, which contains the output of a debug command, and then answer the question below:

What statement is correct about this FortiGate?

A.It is currently in system conserve mode because of high CPU usage.
B.It is currently in FD conserve mode,
C.It is currently in kernel conserve mode because of high memory usage
D.It is currently in system conserve mode because of high memory usage

正解:

Question No : 2
Which troubleshooting step is applicable when investigating antivirus and IPS update issues on FortiGate?

A.Verify outbound ICMP connectivity.
B.Validate DNS resolution for update.fortiguard.net.
C.Use the diagnose debug rating command to check active servers.
D.Use the alternate service port 8888.

正解:

Question No : 3
When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filler web requests when the client browser does not provide the server name indication (SNI) extension?

A.FortiGate switches to the full SSL inspection method to decrypt the data
B.FortiGate blocks the request without any further inspection
C.FortiGate uses the Issued Tо: field in the server's certificate
D.FortiGate uses the requested URL from the user's web browser

正解:

Question No : 4
View the exhibit, then answer the question below.

Which of the following commands will bring up the tunnel?

A.diagnose vpn tunnel up 10.200.1.1
B.diagnose vpn tunnel H2S_0 up
C.diagnose vpn tunnel up H2S_0
D.diagnose vpn tunnel up H2S_0_0

正解:

Question No : 5
When a FortiLink interface is configured on a FortiGate, which VLAN is typically set as the default allowed VLAN on all connected FortiSwitch ports?

A.Sniffer VLAN
B.Camera VLAN
C.Quarantine VLAN
D.Management VLAN

正解:

Question No : 6
Refer to the exhibit, which shows a session entry.

Which statement about this session is true?

A.It is an ICMP session from 10.1.10.10 to 10.200.5. 1.
B.It is a TCP session in close_wait state, from 10. l. 10.10 to 10.200.1.1.
C.It is an ICMP session from 10.1.10.10 to 10.200.1.1.
D.It is a TCP session in the established state, from 10.1.10.10 to 10.200.5.1.

正解:

Question No : 7
Refer to the exhibit, which contains the partial output of a diagnose command.

Based on the output, which two statements are correct? (Choose two.)

A.The remote gateway has quick mode selectors containing a destination subnet of 10.1.2.0/24.
B.The remote gateway IP is 10.200.5.1.
C.DPD is disabled.
D.Anti-replay is enabled.

正解:

Question No : 8
Examine the following partial outputs from two routing debug commands; then answer the question below:

Why the default route using port2 is not displayed in the output of the second command?

A.It has a lower priority than the default route using port1.
B.It has a higher priority than the default route using port1.
C.It has a higher distance than the default route using port1.
D.It is disabled in the FortiGate configuration.

正解:

Question No : 9
View the exhibit, which contains the partial output of the web filtering cache, and then answer the question below.

Which category does www.elitehacking.com belong to?

A.Information Technology
B.Peer-to-peer File Sharing
C.Other Adult Materials
D.Business

正解:

Question No : 10
View the exhibit, which contains the output of a BGP debug command, and then answer the question below.

Which of the following statements about the exhibit are true? (Choose two.)

A.For the peer 10.125.0.60, the BGP state of is Established.
B.The local BGP peer has received a total of three BGP prefixes.
C.Since the BGP counters were last reset, the BGP peer 10.200.3.1 has never been down.
D.The local BGP peer has not established a TCP session to the BGP peer 10.200.3.1.

正解:

Question No : 11
View the central management configuration shown in the exhibit, and then answer the question below.

Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?

A.10.0.1.240
B.One of the public FortiGuard distribution servers
C.0.0.1.244
D.10.0.1.242

正解:

Question No : 12
View the exhibit, which contains the output of a debug command, then answer the question below.

Why is the gateway to source for this session 0.0.0.0?

A.The traffic for this session is ICM
B.The the source of the traffic is directly connected to the FortiGate.
C.The FortiGate is not doing NAT over this traffic.
D.FortiGate has only seen the first packet sent by the originator.

正解:

Question No : 13
Which ADVPN configuration must be configured using a script on FortiManager, when using VPN Manager to manage FortiGate VPN tunnels?

A.Disable add-route on hub
B.Set protected network to all
C.Enable AD-VPN in IPsec phase 1
D.Configure IP addresses on IPsec virtual interfaces

正解:

Question No : 14
Which step can be taken to ensure that only FortiAP devices receive IP addresses from a DHCP server on FortiGate?

A.Change the interface addressing mode to FortiAP devices
B.Create a reservation list in the DHCP server settings
C.Configure a VCI string value of FortiAP in the DHCP server settings
D.Use DHCP option 138 to assign IPs to FortiAP devices

正解:

Question No : 15
Refer to the exhibit, which shows a FortiGate configuration.

An administrator is troubleshooting a web filter issue on FortiGate. The administrator has configured a web filter profile and applied it to a policy; however, the web filter is not inspecting any traffic that is passing through the policy.
What must the administrator change to fix the issue?

A.The administrator must increase webfilter-timeout.
B.The administrator must change protocol to TC
C.The administrator must enable fortiguard-anycast.
D.The administrator must disable webfilter-force-off.

正解:

Fortinet FCSS_EFW_AD-7.4 問題練習