NSE7_EFW-6.0 試験問題を無料オンラインアクセス

Examine the output of the 'diagnose ips anomaly list' command shown in the exhibit; then answer the question below.

Which IP addresses are included in the output of this command?

• A.Those whose traffic matches an IPS sensor.
• B.Those whose traffic was detected as an anomaly by an IPS sensor.
• C.Those whose traffic exceeded a threshold of a matching DoS policy.
• D.Those whose traffic matches a DoS policy.

What global configuration setting changes the behavior for content-inspected traffic while FortiGate is in system conserve mode?

• A.mem-failopen
• B.av-failopen
• C.utm-failopen
• D.ips-failopen

Which of the following statements is true regarding a FortiGate configured as an explicit web proxy?

• A.FortiGate limits the number of simultaneous sessions per explicit web proxy user. This limit CANNOT be modified by the administrator.
• B.FortiGate limits the number of workstations that authenticate using the same web proxy user credentials.
  This limit CANNOT be modified by the administrator.
• C.FortiGate limits the number of simultaneous sessions per explicit web proxy user The limit CAN be modified by the administrator
• D.FortiGate limits the total number of simultaneous explicit web proxy users.

A FortiGate device has the following LDAP configuration:

The administrator executed the 'dsquery' command in the Windows LDAp server 10.0.1.10, and got the following output:
>dsquery user -samid administrator
"CN=Administrator, CN=Users, DC=trainingAD, DC=training, DC=lab"
Based on the output, what FortiGate LDAP setting is configured incorrectly?

• A.cnid.
• B.username.
• C.password.
• D.dn.

Examine the partial output from the IKE real time debug shown in the exhibit; then answer the question below.

Why didn't the tunnel come up?

• A.The remote gateway's Phase-2 configuration does not match the local gateway's phase-2 configuration.
• B.IKE mode configuration is not enabled in the remote IPsec gateway.
• C.One IPsec gateway is using main mode, while the other IPsec gateway is using aggressive mode.
• D.The remote gateway's Phase-1 configuration does not match the local gateway's phase-1 configuration.