NSE7_EFW-6.2 試験問題を無料オンラインアクセス

View the exhibit, which contains the output of a diagnose command, and then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

• A.Servers with a negative TZ value are experiencing a service outage.
• B.FortiGate will probe 121.111.236.179 every fifteen minutes for a response.
• C.FortiGate used 209.222.147.3 as the initial server to validate its contract.
• D.Servers with the D flag are considered to be down.

A FortiGate device has the following LDAP configuration:

The LDAP user student cannot authenticate. The exhibit shows the output of the authentication real time debug while testing the student account:

Based on the above output, what FortiGate LDAP settings must the administer check? (Choose two.)

• A.password.
• B.cnid.
• C.dn.
• D.username.

A corporate network allows Internet Access to FSSO users only. The FSSO user student does not have Internet access after successfully logged into the Windows AD network. The output of the 'diagnose debug authd fsso list' command does not show student as an active FSSO user. Other FSSO users can access the Internet without problems. What should the administrator check? (Choose two.)

• A.The student workstation's IP subnet must be listed in the CA's trusted list.
• B.The user student must not be listed in the CA's ignore user list.
• C.At least one of the student's user groups must be allowed by a FortiGate firewall policy.
• D.The user student must belong to one or more of the monitored user groups.

View the exhibit, which contains a partial routing table, and then answer the question below.

Assuming all the appropriate firewall policies are configured, which of the following pings will FortiGate route? (Choose two.)

• A.Source IP address 10.72.3.27, Destination IP address 10.1.0.52.
• B.Source IP address 10.73.9.10, Destination IP address 10.72.3.15.
• C.Source IP address 10.1.0.24, Destination IP address 10.72.3.20.
• D.Source IP address 10.72.3.52, Destination IP address 10.1.0.254.

Refer to the exhibit, which contains partial outputs from two routing debug commands.

Why is the port2 default route not in the second command's output?

• A.It has a lower priority value than the default route using port1.
• B.It has a higher priority value than the default route using port1.
• C.It has a higher distance than the default route using port1.
• D.It is disabled in the FortiGate configuration.