EFW-7.6

更新时间：试题数量：购买人数：提供作者：

有效期：个月

章节介绍：共有个章节

我的练习

我的错题
(0道)

我的收藏
(0道)

我的斩题
(0道)

我的笔记
(0道)

专项练习

顺序练习 练习进度 0 / 0

随机练习 自定义设置练习量

模拟考试 仿真模拟

题型练习 按题型分类练习

易错题 精选高频易错题

学习资料 考试学习相关信息

搜索

题库预览

Refer to the exhibit.

（含图）

The network diagram shows the addition of Site 2 with an overlapping network segment to the existing VPN IPsec connection between the hub and Site 1.

Which IPsec phase 2 configuration must you make on the FortiGate hub to enable equal-cost multi-path (ECMP) routing when multiple remote sites connect with overlapping subnets?

Refer to the exhibit.

（含图）

You need to modify the MED value advertised from FortiGate_1 to a BGP neighbor in the autonomous system, AS 30.

Which parameter must you configure on FortiGate_1 to implement this?

Refer to the exhibits.

（含图）

The firewall policy ID 1 of the DCFW policy package and the reinstall preview window for the DCFW policy package installation are shown.

Why is FortiManager is installing set srcaddr "SSLVPN_TUNNEL_ADDR1" on firewall policy ID 1 when the policy package DCFW has the source address 10.0.5 on the firewall policy ID 1?

A user reports that their computer was infected with malware after accessing a secured HTTPS website. However, when you check the FortiGate logs, you see that FortiGate did not detect the website as insecure, despite having an SSL certificate and the correct profiles applied on the policy.

How can you ensure that FortiGate can analyze encrypted HTTPS traffic on a website?

You applied a block-all intrusion prevention system (IPS) profile for client and server targets to secure the server,but the database team reported that applications stopped working immediately after. How can you apply IPS in a way that ensures it does not disrupt existing applications in the network?

An organization's guest internet policy,operating in proxy mode, blocks access to artificial intelligence technology sites using FortiGuard. However, a guest user accessed a page in this category using port 8443.

Which configuration change must you make for FortiGate to analyze HTTPS traffic on nonstandard ports like 6443, when full SSL inspection is active in the guest policy?

Refer to the exhibits.

（含图）

The system administrator settings configured on a root FortiGate and the Security Fabric settings configured on a downstream FortiGate are shown.

When prompted to sign in with Security Fabric to the downstream FortiGate, a user enters the single sign-on (SSO) provider credentials.

What is the result?

Refer to the exhibit.

（含图）

An enterprise network connected to an ISP is shown.

You must configure a loopback as a BGP source to connect to the ISP.

Which two commands must you use to establish the connection? (Choose two.)

Refer to the exhibit.

（含图）

A network diagram with a hub and spokes deployment is shown.

You must deploy several spokes, including the BGP configuration for the spokes that connect to the hub.

Which two commands would you use to minimize the amount of configuration needed on the hub? (Choose two.)

Refer to the exhibit.

（含图）

The VDOM configuration on a FortiGate device is shown.

You discover that web filtering stopped working in Core1 and Core2 after a maintenance window.

What are two reasons why web filtering stopped working? (Choose two.)

Refer to the exhibit.

（含图）

The partial output of an OSPF command is shown. While cheecking the OSPF status of FortiGate. you receive the output shown in the exhibit.

Based on the output, which two statements about FortiGate are correct ? (Choose two.)

Refer to the exhibit.

（含图）

The packet capture output of a client hello message is shown.

You are updating a firewall policy that includes SSL certificate irispection. You are capturing packets from the traffic passing through this firewall policy.

Which two statements about the packet capture are correct? (Choos two.)

Refer to the exhibits.

（含图）

The ADVPN network topology and partial BGP configuration are shown.

Which two parameters must you configure in the config neighbor range for spokes shown in the exhibit? (Choose two.)

Refer to the exhibit.

（含图）

A normalized interface LAN on FortiManager is shown.

Which two statements about this interface configuration are correct ? (Choose two.)

Refer to the exhibit.

（含图）

A physical topology along with a traffic log is shown. You are using FortiAnalyzer to monitor traffic from the device with IP address 10.0.2.51, which is located behind the FortiGate internal segmentation firewall (ISFW) device. Unified threat management (UTM) is not enabled in the firewall policy on the HQ-ISFW devicce, and you are surprised to see a log with the action Malware, as shown in the exhibit.

What are two reasons why FortiAnalyzer would display this log? (Chogose two.)

You are checking an enterprise network and see a suspicious packet with the MAC address 00:09:0f:09:18:81.

Which two statements about the suspicious packet are correct? (Choose two.)

During the last network migration, the IT department discovered that all zero phase selectors in phase 2 IPsec configurations impact network operations.

What are two valid recommendations to prevent potential invalid paths during future migrations? (Choose two.)

If you implement IKEv2 in a VPN topology, which two statements are true ? (Choose two.)

You must segment an enterprise network.

Which two features could you use ? (Choose two.)

Refer to the exhibit.

（含图）

An ADVPN network is shown.

You must configure an ADVPN using IBGP for each local region and EBGP across regions to connect Overlay 1 with Overlay 2.

Which two options must you configure in the Hub2Hub BGP peering ? (Choose two.)

1 2 3 4

更多题库