최신Fortinet NSE 7 - Secure Networking 7.6 Architect - NSE7_FSN_AR-7.6무료샘플문제

A. An SD-WAN rule

B. A regular policy route, which is associated with an active static route in the FIB

C. A regular policy route

D. An ISDB route

A. Modify the default gateway on the laptop from 10.1.0.2 to 10.2.0.2.

B. Enable asymmetric routing under config system settings.

C. A firewall policy that allows all ICMP traffic from port3 to port1.

D. Change the configuration from strict RPF check mode to feasible RPF check mode.

A. Set the priority of the static default route using port2 to 1.

B. Set the priority of the static default route using port1 to 10.

C. Set preserve-session-route to enable.

D. Set snat-route-change to enable.

A. You can configure automation stitches on any FortiGate device in a Security Fabric environment.

B. You can create automation stitches to run diagnostic commands and attach the results to an email message when CPU or memory usage exceeds specified thresholds.

C. You can set an automation stitch configured to execute actions in parallel to insert a specific delay between actions.

D. You can configure automation stitches to execute actions sequentially by taking parameters from previous actions as input for the current action.

A. FortiTelemetry must be manually enabled on the FortiGate interface.

B. Security Fabric communication is enabled by default among all Fortinet devices.

C. The default ports for FortiTelemetry and Neighbor Discovery can be modified.

D. By default, the downstream FortiGate establishes a connection with the upstream FortiGate using TCP port 8013.

A. This is an expected session created by the IPS engine.

B. Traffic in the original direction (coming from the IP address 10.171.121.38) will be routed to the next- hop IP address 10.0.1.10.

C. This is a pinhole session created to allow traffic for a protocol that requires additional sessions to operate through FortiGate.

D. Traffic in the original direction (coming from the IP address 10.171.121.38) will be routed to the next- hop IP address 10.200.1.1.

A. It is an ICMP session from 10.1.10.1 to 10.200.5.1.

B. It is an ICMP session from 10.1.10.10 to 10.200.1.1.

C. Return traffic to the initiator is sent lo 10.200.1.254.

D. Return traffic to the initiator is sent to 10.1.0.1.

A. The IdP IP address is 10.1.10.2.

B. The SP IP address is 10.1.10.254.

C. The IdP IP address is 10.1.10.254.

D. The SP IP address is 10.1.10.2.

A. A mismatched Diffie-Hellman group was detected during the IKE_SA_INIT exchange.

B. A mismatched proposal was detected during the IKE_AUTH exchange.

C. A mismatched pre-shared key was detected during the IKE_AUTH exchange.

D. Mismatched traffic selectors (phase 2 / "quick-mode selectors") were detected during the CREATE_CHILD_SA exchange.