NSE7_NST-7.2 試験問題を無料オンラインアクセス

Refer to the exhibit, which shows a session table entry.

Which statement about FortiGate behavior relating to this session is true?

• A.FortiGate applied only IPS inspection to this session.
• B.FortiGate redirected the client to the captive portal to authenticate, so that a correct policy match could be made.
• C.FortiGate forwarded this session without any inspection.
• D.FortiGate is performing a security profile inspection using the CPU.

Which two statements about conserve mode are true? (Choose two.)

• A.FortiGate starts dropping all new sessions when the system memory reaches the configured red threshold.
• B.FortiGate exits conserve mode when the system memory goes below the configured green threshold
• C.FortiGate starts taking the configured action for new sessions requiring content inspection when the system memory reaches the configured red threshold.
• D.FortiGate enters conserve mode when the system memory reaches the configured extreme threshold.

Which statement is correct regarding LDAP authentication using the regular bind type?

• A.The regular bind type cannot be used if users are authenticated using sAMAccountName.
• B.The regular bind typerequires a FortiGate super_adminaccount.
• C.The regular bind type goes through four steps to successfully authenticate a user.
• D.The regular bind type is the easiest bind type to configure on FortiOS.

What are two functions of automation stitches? (Choose two.)

• A.You can set an automation stitch configured to execute actions in parallel to insert a specific delay between actions.
• B.An automation stitch configured to execute actions sequentially can take parameters from previous actions as input for the current action.
• C.You can configure automation stitches on any FortiGate device in a Security Fabric environment.
• D.You can create automation stitches to run diagnostic commands and attach the results to an email message when CPU or memory usage exceeds specified thresholds.

Exhibit.

Refer to the exhibit, which contains the partial output of the get vpn ipsec tunnel details command. Based on the output, which two statements are correct? (Choose two.)

• A.Anti-replay is enabled.
• B.The npu_flag for this tunnel is 02
• C.Different SPI values are a result of auto-negotiation being disabled for phase 2 selectors.
• D.The npu_flag for this tunnel is 03.