FCSS_EFW_AD-7.6 試験問題を無料オンラインアクセス

An administrator must minimize CPU and RAM use on a FortiGate firewall while also enabling essential security features, such as web filtering and application control for HTTPS traffic.
Which SSL inspection setting helps reduce system load while also enabling security features, such as web filtering and application control for encrypted HTTPS traffic?

• A.Enable SSL certificate inspection mode to perform basic checks without decrypting traffic.
• B.Disable SSL inspection entirely to conserve resources.
• C.Configure SSL inspection to handle HTTPS traffic efficiently.
• D.Use full SSL inspection to thoroughly inspect encrypted payloads.

Refer to the exhibit, which contains the partial output of an OSPF command.
An administrator is checking the OSPF status of a FortiGate device and receives the output shown in the exhibit.
What two conclusions can the administrator draw? (Choose two.)

• A.The FortiGate device is a backup designated router
• B.The FortiGate device injects external routing information
• C.The FortiGate device has OSPF ECMP enabled
• D.The FortiGate device is connected to multiple areas

Refer to the exhibit, which shows an enterprise network connected to an internet service provider.

An administrator must configure a loopback as a BGP source to connect to the ISP.
Which two commands are required to establish the connection? (Choose two.)

• A.ebgp-enforce-multihop
• B.recursive-next-hop
• C.ibgp-enforce-multihop
• D.update-source

An administrator must standardize the deployment of FortiGate devices across branches with consistent interface roles and policy packages using FortiManager.
What is the recommended best practice for interface assignment in this scenario?

• A.Enable metadata variables to use dynamic configurations in the standard interfaces of FortiManager.
• B.Use the Install On feature in the policy package to automatically assign different interfaces based on the branch.
• C.Create interfaces using device database scripts to use them on the same policy package of FortiGate devices.
• D.Create normalized interface types per-platform to automatically recognize device layer interfaces based on the FortiGate model and interface name.

Refer to the exhibit.
A physical topology along with a traffic log is shown. You are using FortiAnalyzer to monitor traffic from the device with IP address 10.0.2.51, which is located behind the FortiGate internal segmentation firewall (ISFW) device. Unified threat management (UTM) is not enabled in the firewall policy on the HQ-ISFW device, and you are surprised to see a log with the action Malware, as shown in the exhibit. What are two reasons why FortiAnalyzer would display this log? (Choose two answers)

• A.UTM is enabled in the firewall policy in HQ-NGFW-1.
• B.HQ-ISFW is not connected to FortiAnalyzer and traffic must go through HQ-NGFW-1.
• C.Security rating is enabled in HQ-ISFW.
• D.HQ-ISFW is in a Security Fabric environment.