NSE7_EFW-6.4 試験問題を無料オンラインアクセス

Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.)

• A.IPS failopen
• B.AV failopen
• C.mem failopen
• D.UTM failopen

Refer to the exhibit, which contains the partial output of a diagnose command.

Based on the output, which two statements are correct? (Choose two.)

• A.Quick mode selectors are disabled.
• B.DPD is disabled.
• C.Anti-replay is enabled.
• D.Remote gateway IP is 10.200.4.1.

Refer to the exhibit, which contains the partial output of the get vpn ipsec tunnel details command.

Based on the output, which two statements are correct? (Choose two.)

• A.Phase 2 authentication is set to sha1 on both sides.
• B.Hub2Spoke1 is configured on interface wan2.
• C.Hub2Spoke1 is a policy-based VPN.
• D.Anti-replay is disabled.

Which two statements about FortiManager is true when it is deployed as a local FDS? (Choose two.)

• A.It supports rating requests from both managed and unmanaged devices.
• B.It caches available firmware updates for unmanaged devices.
• C.It provides VM license validation services.
• D.It can be configured as an update server, or a rating server, but not both.

View the exhibit, which contains the output of diagnose sys session list, and then answer the question below.

If the HA ID for the primary unit is zero (0), which statement is correct regarding the output?

• A.This session is for HA heartbeat traffic.
• B.This session cannot be synced with the slave unit.
• C.The inspection of this session has been offloaded to the slave unit.
• D.This session is synced with the slave unit.