최신Fortinet FCSS - Enterprise Firewall 7.6 Administrator - FCSS_EFW_AD-7.6무료샘플문제
문제1
Refer to the exhibit, which shows the HA status of an active-passive cluster.
An administrator wants FortiGate_B to handle the Core2 VDOM traffic.
Which modification must the administrator apply to achieve this?
Refer to the exhibit, which shows the HA status of an active-passive cluster.
An administrator wants FortiGate_B to handle the Core2 VDOM traffic.
Which modification must the administrator apply to achieve this?
정답: D
설명: (ExamPassdump 회원만 볼 수 있음)
문제2
How can FortiGate analyze HTTPS traffic on non-standard port 8443?
How can FortiGate analyze HTTPS traffic on non-standard port 8443?
정답: B
문제3
An administrator is designing an ADVPN network for a large enterprise with spokes that have varying numbers of internet links. They want to avoid a high number of routes and peer connections at the hub.
Which method should be used to simplify routing and peer management?
An administrator is designing an ADVPN network for a large enterprise with spokes that have varying numbers of internet links. They want to avoid a high number of routes and peer connections at the hub.
Which method should be used to simplify routing and peer management?
정답: A
설명: (ExamPassdump 회원만 볼 수 있음)
문제4
During the maintenance window, you must sniff all the traffic going through a specific firewall policy, which is handled by NP6 interfaces. The output of the sniffer trace provides just a few packets. Why is the output of the sniffer trace limited?
During the maintenance window, you must sniff all the traffic going through a specific firewall policy, which is handled by NP6 interfaces. The output of the sniffer trace provides just a few packets. Why is the output of the sniffer trace limited?
정답: D
설명: (ExamPassdump 회원만 볼 수 있음)
문제5
An administrator is setting up an ADVPN configuration and wants to ensure that peer IDs are not exposed during VPN establishment.
Which protocol can the administrator use to enhance security?
An administrator is setting up an ADVPN configuration and wants to ensure that peer IDs are not exposed during VPN establishment.
Which protocol can the administrator use to enhance security?
정답: A
설명: (ExamPassdump 회원만 볼 수 있음)
문제6
If you configure set tcp-mss-sender and set tcp-mss-receiver in a firewall policy, how does it affect the size and handling of TCP packets in the network?
If you configure set tcp-mss-sender and set tcp-mss-receiver in a firewall policy, how does it affect the size and handling of TCP packets in the network?
정답: C
설명: (ExamPassdump 회원만 볼 수 있음)
문제7
An administrator must minimize CPU and RAM use on a FortiGate firewall while also enabling essential security features, such as web filtering and application control for HTTPS traffic. Which SSL inspection setting helps reduce system load while also enabling security features, such as web filtering and application control for encrypted HTTPS traffic?
An administrator must minimize CPU and RAM use on a FortiGate firewall while also enabling essential security features, such as web filtering and application control for HTTPS traffic. Which SSL inspection setting helps reduce system load while also enabling security features, such as web filtering and application control for encrypted HTTPS traffic?
정답: C
설명: (ExamPassdump 회원만 볼 수 있음)
문제8
To secure your enterprise network traffic, which step does FortiGate perform first, when handling the first packets of a session?
To secure your enterprise network traffic, which step does FortiGate perform first, when handling the first packets of a session?
정답: C
설명: (ExamPassdump 회원만 볼 수 있음)
문제9
Refer to the exhibit, which shows an OSPF network.
Which types of link-state advertisements (LSA) will NGFW-1 send, if it is a backup designated router (BDR)?
Refer to the exhibit, which shows an OSPF network.
Which types of link-state advertisements (LSA) will NGFW-1 send, if it is a backup designated router (BDR)?
정답: D
문제10
Refer to the exhibit, which shows an ADVPN network.
The client behind Spoke-1 generates traffic to the device located behind Spoke-2. What is the first message that the hub sends to Spoke-1 to bring up the dynamic tunnel?
Refer to the exhibit, which shows an ADVPN network.
The client behind Spoke-1 generates traffic to the device located behind Spoke-2. What is the first message that the hub sends to Spoke-1 to bring up the dynamic tunnel?
정답: A
설명: (ExamPassdump 회원만 볼 수 있음)