NSE7_EFW 試験問題を無料オンラインアクセス

An administrator has configured a dial-up IPsec VPN with one phase 2, extended authentication (XAuth) and IKE mode configuration. The administrator has also enabled the IKE real time debug:
diagnose debug application ike-1
diagnose debug enable
In which order is each step and phase displayed in the debug output each time a new dial-up user is connecting to the VPN?

• A.Phase1; IKE mode configuration; phase 2; XAuth.
• B.Phase1; XAuth; IKE mode configuration; phase2.
• C.Phase1; IKE mode configuration; XAuth; phase 2.
• D.Phase1; XAuth; phase 2; IKE mode configuration.

View the exhibit, which contains the output of a diagnose command, and then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

• A.Servers with a negative TZ value are experiencing a service outage.
• B.Servers with the D flag are considered to be down.
• C.FortiGate will probe 121.111.236.179 every fifteen minutes for a response.
• D.FortiGate used 209.222.147.3 as the initial server to validate its contract.

The logs in a FSSO collector agent (CA) are showing the following error:
failed to connect to registry: PIKA1026 (192.168.12.232)
What can be the reason for this error?

• A.The remote registry service is not running in the workstation 192.168.12.232.
• B.The CA cannot reach the FortiGate with the IP address 192.168.12.232.
• C.The CA cannot resolve the name of the workstation.
• D.The FortiGate cannot resolve the name of the workstation.

When using the SSL certificate inspection method for HTTPS traffic, how does FortiGate filter web requests when the browser client does not provide the server name indication (SNI)?

• A.FortiGate uses the requested URL from the user's web browser.
• B.FortiGate uses the Issued To: field in the server's certificate.
• C.FortiGate switches to the full SSL inspection method to decrypt the data.
• D.FortiGate blocks the request without any further inspection.

View the following FortiGate configuration.

All traffic to the Internet currently egresses from port1. The exhibit shows partial session information for Internet traffic from a user on the internal network:

If the priority on route ID 1 were changed from 5 to 20, what would happen to traffic matching that user's session?

• A.The session would remain in the session table, and its traffic would still egress from port1.
• B.The session would be deleted, so the client would need to start a new session.
• C.The session would remain in the session table, but its traffic would now egress from both port1 and port2.
• D.The session would remain in the session table, and its traffic would start to egress from port2.