NSE7_NST-7.2 試験問題を無料オンラインアクセス

Which of the following regarding protocol states is true?

• A.proto_state=00 indicates that UDP traffic flows in both directions.
• B.proto_state-01 indicates an established TCP session.
• C.proto state=01 indicates one-way ICMP traffic.
• D.proto_state=10 indicates an established TCP session.

Referto the exhibit, which shows oneway communication of the downstream FortiGate with the upstream FortiGate within a Security Fabric.

What three actions must you take to ensure successful communication? (Choose three.)

• A.FortiGate must not be in NAT mode.
• B.Ensure the port for Neighbor Discovery has been changed.
• C.Ensure TCP port 8013 is not blocked along the way
• D.You must authorize the downstream FortiGate on the root FortiGate.
• E.You must enable Security Fabric/Fortitelemetry on the receiving interface of the upstream FortiGate.

Refer to the exhibit, which shows a session table entry.

Which statement about FortiGate behavior relating to this session is true?

• A.FortiGate is performing a security profile inspection using the CPU.
• B.FortiGate applied only IPS inspection to this session.
• C.FortiGate forwarded this session without any inspection.
• D.FortiGate redirected the client to the captive portal to authenticate, so that a correct policy match could be made.

Refer to the exhibits, which show the configuration on FortiGate and partial session information for internet traffic from a user on the internal network.
If the priority on route ID _ were changed from 10 to 0, what would happen to traffic matching that user session?

• A.The session would remain in the session table, and itstraffic would egress from port1.
• B.The session would remain in the session table, but its trafficwould now egress from both port1.andport2.
• C.The session would be deleted, and the client would need to start a new session.
• D.The session would remain in the session table, and its traffic would egress from port2.

Exhibit.

Refer to the exhibit, which contains partial output from an IKE real-time debug.
The administrator does not have access to the remote gateway.
Based on the debug output, which configuration change can the administrator make to the local gateway to resolve the phase 1 negotiation error?

• A.In the phase 1 proposal configuration, add AES256-SHA256 to the list of encryption algorithms.
• B.In the phase 1 network configuration, set the IKE version to 2.
• C.In the phase 1 proposal configuration, add AESCBC-SHA2 to the list of encryption algorithms.
• D.In the phase 1 proposal configuration, add AES128-SHA128 to the list of encryption algorithms.