NSE7_EFW-7.0 試験問題を無料オンラインアクセス

Examine the output of the 'diagnose ips anomaly list' command shown in the exhibit; then answer the question below.

Which IP addresses are included in the output of this command?

• A.Those whose traffic matches an IPS sensor.
• B.Those whose traffic was detected as an anomaly by an IPS sensor.
• C.Those whose traffic matches a DoS policy.
• D.Those whose traffic exceeded a threshold of a matching DoS policy.

Refer to the exhibit, which shows a FortiGate configuration.

An administrator is troubleshooting a web filter issue on FortiGate. The administrator has configured a web filter profile and applied it to a policy; however, the web filter is not inspecting any traffic that is passing through the policy.
What must the administrator change to fix the issue?

• A.Increase webfilter-timeout.
• B.Enable fortiguard-anycast.
• C.Disable webfilter-force-off.
• D.Change protocol to TCP.

An administrator wants to capture encrypted phase 2 traffic between two FortiGate devices using the built-in sniffer.
If the administrator knows that there is no NAT device located between both FortiGate devices, which command should the administrator run?

• A.diagnose sniffer packet any 'ah'
• B.diagnose sniffer packet any 'ip proto 50'
• C.diagnose sniffer packet any 'udp port 4500'
• D.diagnose sniffer packet any 'udp port 500'

Refer to the exhibit, which shows the output of a diagnose command.

What can be concluded about the debug output in this scenario?

• A.Servers with a negative TZ value are less preferred for rating requests.
• B.There is a natural correlation between the value in the Packets field and the value in the Weight field.
• C.FortiGate used 64.26.151.37 as the initial server to validate its contract.
• D.The first server provided to FortiGate when it performed a DNS query looking for a list of rating servers, was 121.111.236.179.

Examine the following routing table and BGP configuration; then answer the question below.

TheBGP connection is up, but the local peer is NOT advertising the prefix 192.168.1.0/24. Which configuration change will make the local peer advertise this prefix?

• A.Disable the setting network-import-check.
• B.Enable the redistribution of connected routers into BGP.
• C.Enable the setting ebgp-multipath.
• D.Enable the redistribution of static routers into BGP.