최신 NSE 7 Network Security Architect NSE7_EFW-6.2 무료샘플문제:
1. An administrator has enabled HA session synchronization in a HA cluster with two members. Which flag is added to a primary unit's session to indicate that it has been synchronized to the secondary unit?
A) dirty.
B) redir.
C) nds.
D) synced
2. View the exhibit, which contains the output of a diagnose command, and the answer the question below.
Which statements are true regarding the Weight value?
A) Its initial value is statically set to 10.
B) Its initial value is calculated based on the round trip delay (RTT).
C) Its value is incremented with each packet lost.
D) It determines which FortiGuard server is used for license validation.
3. What does the dirty flag mean in a FortiGate session?
A) Traffic has been identified as from an application that is not allowed.
B) Traffic has been blocked by the antivirus inspection.
C) The session must be removed from the former primary unit after an HA failover.
D) The next packet must be re-evaluated against the firewall policies.
4. Which of the following statements are correct regarding application layer test commands? (Choose two.)
A) They display real-time application debugs.
B) Some of them display statistics and configuration information about a feature or process.
C) They are used to filter real-time debugs.
D) Some of them can be used to restart an application.
5. An administrator has configured a dial-up IPsec VPN with one phase 2, extended authentication (XAuth) and IKE mode configuration. The administrator has also enabled the IKE real time debug:
diagnose debug application ike-1
diagnose debug enable
In which order is each step and phase displayed in the debug output each time a new dial-up user is connecting to the VPN?
A) Phase1; XAuth; IKE mode configuration; phase2.
B) Phase1; XAuth; phase 2; IKE mode configuration.
C) Phase1; IKE mode configuration; XAuth; phase 2.
D) Phase1; IKE mode configuration; phase 2; XAuth.
질문과 대답:
질문 # 1 정답: D | 질문 # 2 정답: C | 질문 # 3 정답: D | 질문 # 4 정답: B,D | 질문 # 5 정답: A |