NSE7_FSN_AR-7.6 試験問題を無料オンラインアクセス

Refer to the exhibit, which shows the partial output of a diagnose command.

Which two conclusions can you draw from the output shown in the exhibit? (Choose two.)

• A.FortiGate will drop the expected traffic if it does not arrive within 23 seconds.
• B.This is a pinhole session to allow traffic for a TCP protocol that dynamically assigns TCP ports.
• C.Clearing the master session has no impact on the expectation session.
• D.The session is checked against firewall policy ID 25.

Refer to the exhibit, which shows one way communication of the downstream FortiGate with the upstream FortiGate within a Security Fabric.

What three actions must you take to ensure successful communication? (Choose three.)

• A.Ensure TCP port 8013 is not blocked along the way.
• B.FortiGate must not be in NAT mode.
• C.You must authorize the downstream FortiGate on the root FortiGate.
• D.You must enable Security Fabric/Fortitelemetry on the receiving interface of the upstream FortiGate.
• E.Ensure the port for Neighbor Discovery has been changed.

Refer to the exhibit.

A network topology and a partial routing table are shown.
FortiGate has already been configured with a firewall policy that allows all ICMP traffic to flow from port1 to port3.
Which two changes can the administrator perform to ensure the server at 10.4.0.1/24 receives the ICMP echo reply from the laptop at 10.1.0.1/24? (Choose two.)

• A.Change the FortiGate configuration from strict RPF check mode to feasible RPF check mode.
• B.Modify the default gateway on the laptop from 10.1.0.2 to 10.1.0.254.
• C.Add a default static route on FortiGate to forward all traffic to port3.
• D.Enable asymmetric routing under config system settings.

Which three factors about service-level agreement (SLA) targets and SD-WAN rules should you consider when configuring SD-WAN rules? (Choose three.)

• A.When configuring an SD-WAN rule, you can select multiple SLA targets from the same performance SLA.
• B.When configuring an SD-WAN rule, you can select only one SLA target from a performance SLA.
• C.Best performance SD-WAN rules cannot use SLA targets.
• D.SLA targets are used only by SD-WAN rules that are configured with a lowest cost (SLA) strategy.
• E.Member metrics are measured when an SLA target references them.

In which two slates is a given session categorized as ephemeral? (Choose two.)

• A.A UOP session with packets sent and received
• B.A TCP session waiting for FIN ACK
• C.A UDP session with only one packet received
• D.A TCP session waiting for the SYN ACK