NSE7_EFW-7.2 試験問題を無料オンラインアクセス

Refer to the exhibit, which shows a custom signature.

Which two modifications must you apply to the configuration of this custom signature so that you can save it on FortiGate? (Choose two.)

• A.Start options with --.
• B.Ensure that the header syntax is F-SBID.
• C.Add severity.
• D.Add attack_id.

Which two features are true regarding IPS hardware acceleration? (Choose two.)

• A.set np-access-mode basic will provide last path for IPS inspected traffic
• B.Network processors provide pre-IPS anomaly filtering and logging
• C.FortiGate does not support IPSA if the cp-accel-mode is configured as none.
• D.cp-accel-iaode advanced option is available only on FortiGate devices that have one or more CP8 processors

Refer to the exhibit, which shows a routing table.

What two options can you configure in OSPF to block the advertisement of the 10.1.10.0 prefix? (Choose two.)

• A.Disable Redistribute Connected
• B.Configure a route-map out
• C.Remove the 16.1.10.C prefix from the OSPF network
• D.Configure a distribute-list-out

Exhibit.


Refer to the exhibit, which contains an ADVPN network diagram and a partial BGP con figuration Which two parameters Should you configure in config neighbor range? (Choose two.)

• A.set route reflector-client enable
• B.set prefix 172.16.1.0 255.255.255.0
• C.set neighbor-group advpn
• D.set prefix 10.1.0 255.255.254.0

While configuring the BGP protocol, an administrator applies the set netuork-inport-check disable command under config network.
What will FortiGate do as a result of this command?

• A.FortiGate will advertise only the corresponding prefixes in the BGP network table to its BGP neighbor, even if itis not in the routing table.
• B.FortiGate will not advertise the prefixes, if it is not in the routing table.
• C.FortiGate will advertise all the prefixes in the BGP network table to its BGP neighbor, even f itis not in the routing table.
• D.FortiGate will not advertise any imported routes received from one BGP neighbor to another.