FCSS_EFW_AD-7.6 試験問題を無料オンラインアクセス

Refer to the exhibit, which shows a LAN interface connected from FortiGate to two FortiSwitch devices.

What two conclusions can you draw from the corresponding LAN interface? (Choose two.)

• A.The LAN interface must use a 802.3ad type interface.
• B.You must enable STP or RSTP on FortiGate and FortiSwitch to avoid layer 2 loopbacks.
• C.FortiGate is using an SD-WAN-type interface to connect to a FortiSwitch device with MCLAG.
• D.This connection is using a FortiLInk to manage VLANs on FortiGate.

An administrator is configuring two FortiGate devices in an HA cluster. While configuring the devices, the administrator issues the following commands on both HA cluster members:

In which two ways do these commands impact the HA cluster? (Choose two.)

• A.They force both HA devices for remote link monitoring to detect an issue in the forwarding path.
• B.They force the former primary to shut down all its interfaces for one second when failover happens, excluding the heartbeat and reserved management interfaces.
• C.They force the switches to update their MAC forwarding tables, when failover happens.
• D.They force the former primary to send gratuitous ARP packets when the failover happens to indicate that the virtual MAC address is now using a different device.

Why does the ISDB block layers 3 and 4 of the OSI model when applying content filtering?
(Choose two.)

• A.The ISDB limits access by URL and domain.
• B.The ISDB works in proxy mode, allowing the analysis of packets in layers 3 and 4 of the OSI model.
• C.FortiGate has a predefined list of all IPs and ports for specific applications downloaded from FortiGuard.
• D.The ISDB blocks the IP addresses and ports of an application predefined by FortiGuard.

An administrator is extensively using VXLAN on FortiGate. Which specialized acceleration hardware does FortiGate need to improve its performance?

• A.9
• B.NP7
• C.SP5
• D.NTurbo

Refer to the exhibit, which shows an ADVPN network.

An administrator must configure an ADVPN using IBGP and EBGP to connect overlay network 1 with 2.
What must the administrator configure in the phase 1 VPN IPSEC configuration of the Hub2Hub tunnels?

• A.set auto-discovery-receiver enable
• B.set auto-discovery-sender enable
• C.set auto-discovery-forwarder enable
• D.set add-route enable