FCSS_EFW_AD-7.6 試験問題を無料オンラインアクセス

An administrator is designing an ADVPN network for a large enterprise with spokes that have varying numbers of internet links. They want to avoid a high number of routes and peer connections at the hub.
Which method should be used to simplify routing and peer management?

• A.Deploy a full-mesh VPN topology to eliminate hub dependency.
• B.Establish a traditional hub-and-spoke VPN topology with policy routes.
• C.Implement static routing over IPsec interfaces for each spoke.
• D.Use a dynamic routing protocol using loopback interfaces to streamline peers and routes.

Refer to the exhibit, which contains a partial VPN configuration.

What can you conclude from this VPN IPsec phase 1 configuration?

• A.A separate interface is created for each dial-up tunnel, which can be slower and more resource intensive, especially in large networks.
• B.This configuration is the best for networks with regular traffic intervals, providing a balance between connectivity assurance and resource utilization.
• C.Peer IDs are unencrypted and exposed, creating a security risk.
• D.FortiGate will not add a route to its routing or forwarding information base when the dynamic tunnel is negotiated.

Refer to the exhibit, which shows the FortiGuard Distribution Network of a FortiGate device.
FortiGuard Distribution Network on FortiGate

An administrator is trying to find the web filter database signature on FortiGate to resolve issues with websites not being filtered correctly in a flow-mode web filter profile.
Why is the web filter database version not visible on the GUI, such as with IPS definitions?

• A.The web filter database is stored locally, but the administrator must run over CLI diagnose autoupdate versions.
• B.The web filter database is only accessible after manual syncing with a valid FDS server using diagnose test update info.
• C.The web filter database is not hosted on FortiGate: FortiGate queries FortiGuard or FortiManager for web filter ratings on demand.
• D.The web filter database is stored locally on FortiGate, but it is hidden behind the GUI. It requires enabling debug mode to make it visible.

Refer to the exhibit, which shows a command output.

FortiGate_A and FortiGate_B are members of an FGSP cluster in an enterprise network.
While testing the cluster using the ping command, the administrator monitors packet loss and found that the session output on FortiGate_B is as shown in the exhibit.
What could be the cause of this output on FortiGate_B?

• A.FortiGate_B is configured in passive mode.
• B.FortiGate_A and FortiGate_B have the same standalone-group-id value.
• C.session-pickup-connectionless is set to disable on FortiGate_B.
• D.The session synchronization is encrypted.

Refer to the exhibit, which shows a hub and spokes deployment.

An administrator is deploying several spokes, including the BGP configuration for the spokes to connect to the hub.
Which two commands allow the administrator to minimize the configuration? (Choose two.)

• A.ibgp-enforce-multihop
• B.route-reflector-client
• C.neighbor-range
• D.neighbor-group