NSE7_EFW-6.2 試験問題を無料オンラインアクセス

Examine the partial output from the IKE real time debug shown in the exhibit; then answer the question below.

Why didn't the tunnel come up?

• A.The remote gateway's Phase-1 configuration does not match the local gateway's phase-1 configuration.
• B.IKE mode configuration is not enabled in the remote IPsec gateway.
• C.The remote gateway's Phase-2 configuration does not match the local gateway's phase-2 configuration.
• D.One IPsec gateway is using main mode, while the other IPsec gateway is using aggressive mode.

Which statements about bulk configuration changes using FortiManager CLI scripts are correct? (Choose two.)

• A.When executed on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate.
• B.When executed on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.
• C.When executed on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate.
• D.When executed on the All FortiGate in ADOM, changes are automatically installed without creating a new revision history.

Which statement is true regarding File description (FD) conserve mode?

• A.FD conserve mode affects all daemons running on the device.
• B.Restarting the WAD process is required to leave FD conserve mode.
• C.A FortiGate enters FD conserve mode when the amount of available description is less than 5%.
• D.IPS inspection is affected when FortiGate enters FD conserve mode.

Examine the following partial outputs from two routing debug commands; then answer the question below:

Why the default route using port2 is not displayed in the output of the second command?

• A.It is disabled in the FortiGate configuration.
• B.It has a lower priority than the default route using port1.
• C.It has a higher priority than the default route using port1.
• D.It has a higher distance than the default route using port1.

Which two conditions must be met for a statistic route to be active in the routing table? (Choose two.)

• A.The outgoing interface is up.
• B.There is no other route, to the same destination, with a higher distance.
• C.The next-hop IP address is up.
• D.The link health monitor (if configured) is up.