NSE7_EFW 試験問題を無料オンラインアクセス

Examine the output from the 'diagnose debug authd fsso list' command; then answer the question below.
# diagnose debug authd fsso list FSSO logons-IP: 192.168.3.1 User: STUDENT Groups:
TRAININGAD/USERS Workstation: INTERNAL2. TRAINING. LAB The IP address 192.168.3.1 is NOT the one used by the workstation INTERNAL2. TRAINING. LAB.
What should the administrator check?

• A.The source IP address of the traffic arriving to the FortiGate from the workstation INTERNAL2.
  TRAINING. LAB.
• B.The reserve DNS lookup forthe IP address 192.168.3.1.
• C.The DNS name resolution for the workstation name INTERNAL2. TRAINING. LAB.
• D.The IP address recorded in the logon event for the user STUDENT.

View the exhibit, which contains the partial output of an IKE real time debug, and then answer the question below.

The administrator does not have access to the remote gateway. Based on the debug output, what configuration changes can the administrator make to the local gateway to resolve the phase 1 negotiation error?

• A.Change phase 1 encryption to AES128 and authentication to SHA512.
• B.Change phase 1 encryption to 3DES and authentication to SHA256.
• C.Change phase 1 encryption to 3DES and authentication to CBC.
• D.Change phase 1 encryption to AESCBC and authentication to SHA128.

Which configuration can be used to reduce the number of BGP sessions in an IBGP network?

• A.Route reflector
• B.Neighbor range
• C.Next-hop-self
• D.Neighbor group

Examine the output of the 'get router info ospf interface' command shown in the exhibit; then answer the question below.

Which statements are true regarding the above output? (Choose two.)

• A.Two OSPF routers are down in the port4 network.
• B.The port4 interface is connected to the OSPF backbone area.
• C.The local FortiGate has been elected as the OSPF backup designated router.
• D.There are at least 5 OSPF routers connected to the port4 network.

An administrator cannot connect to the GIU of a FortiGate unit with the IP address 10.0.1.254. The administrator runs the debug flow while attempting the connection using HTTP. The output of the debug flow is shown in the exhibit:

Based on the error displayed by the debug flow, which are valid reasons for this problem? (Choose two.)

• A.HTTP administrative access is disabled in the FortiGate interface with the IP address 10.0.1.254.
• B.The packet is denied because of reverse path forwarding check.
• C.Redirection of HTTP to HTTPS administrative access is disabled.
• D.HTTP administrative access is configured with a port number different than 80.