NSE7_EFW-6.0 試験問題を無料オンラインアクセス

What events are recorded in the crashlogs of a FortiGate device? (Choose two.)

• A.A process crash.
• B.Changes in the status of any of the FortiGuard licenses.
• C.Configuration changes.
• D.System entering to and leaving from the proxy conserve mode.

Examine the output of the 'diagnose ips anomaly list' command shown in the exhibit; then answer the question below.

Which IP addresses are included in the output of this command?

• A.Those whose traffic exceeded a threshold of a matching DoS policy.
• B.Those whose traffic was detected as an anomaly by an IPS sensor.
• C.Those whose traffic matches an IPS sensor.
• D.Those whose traffic matches a DoS policy.

When using the SSL certificate inspection method for HTTPS traffic, how does FortiGate filter web requests when the browser client does not provide the server name indication (SNI)?

• A.FortiGate switches to the full SSL inspection method to decrypt the data.
• B.FortiGate uses the requested URL from the user's web browser.
• C.FortiGate blocks the request without any further inspection.
• D.FortiGate uses the Issued To: field in the server's certificate.

View the exhibit, which contains the partial output of a diagnose command, and then answer the question below.

Based on the output, which of the following statements is correct?

• A.Remote gateway IP is 10.200.5.1.
• B.DPD is disabled.
• C.Anti-replay is enabled.
• D.Quick mode selectors are disabled.

An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage. However, after the changes, one network application started to have problems. During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before the arrival of the SYN/ACKs. When the SYN/ACK packets arrive to the FortiGate, the unit has already deleted the respective sessions. Which TCP session timer must be increased to fix this problem?

• A.TCP time wait.
• B.TCP half close.
• C.TCP session time to live.
• D.TCP half open.