NSE7_EFW-6.0 試験問題を無料オンラインアクセス

View the exhibit, which contains the output of diagnose sys session stat, and then answer the question below.

Which statements are correct regarding the output shown? (Choose two.)

• A.There are 166 TCP sessions waiting to complete the three-way handshake.
• B.No sessions have been deleted because of memory pages exhaustion.
• C.All the sessions in the session table are TCP sessions.
• D.There are 0 ephemeral sessions.

An administrator has enabled HA session synchronization in a HA cluster with two members. Which flag is added to a primary unit's session to indicate that it has been synchronized to the secondary unit?

• A.dirty.
• B.redir.
• C.synced
• D.nds.

Examine the output of the 'get router info bgp summary' command shown in the exhibit; then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

• A.The local BGP peer has received a total of 3 BGP prefixes.
• B.BGP state of the peer 10.125.0.60 is Established.
• C.Local BGP peer has not received an OpenConfirm from 10.200.3.1.
• D.BGP peer 10.200.3.1 has never been down since the BGP counters were cleared.

What global configuration setting changes the behavior for content-inspected traffic while FortiGate is in system conserve mode?

• A.utm-failopen
• B.mem-failopen
• C.ips-failopen
• D.av-failopen

What does the dirty flag mean in a FortiGate session?

• A.The session must be removed from the former primary unit after an HA failover.
• B.Traffic has been identified as from an application that is not allowed.
• C.The next packet must be re-evaluated against the firewall policies.
• D.Traffic has been blocked by the antivirus inspection.