NSE7_EFW-7.2試験の準備方法｜最高のNSE7_EFW-7.2認証資格試験｜実際的なFortinet NSE 7 - Enterprise Firewall 7.2資格取得講座我々社のFortinet NSE7_EFW-7.2認定試験問題集の合格率は高いのでほとんどの受験生はNSE7_EFW-7.2認定試験に合格するのを保証します。もしあなたはFortinet NSE7_EFW-7.2試験問題集に十分な注意を払って、NSE7_EFW-7.2試験の解答を覚えていれば、NSE7_EFW-7.2認定試験の成功は明らかになりました。Fortinet NSE7_EFW-7.2模擬問題集で実際の質問と正確の解答に疑問があれば、無料の練習問題集サンプルをダウンロードし、チェックしてください。 Fortinet NSE 7 - Enterprise Firewall 7.2 認定 NSE7_EFW-7.2 試験問題 (Q61-Q66):質問 # 61
Refer to the exhibit, which contains a partial OSPF configuration.
What can you conclude from this output?
A. The router sends grace LSAs before it restarts.
B. FortiGate restarts if the topology changes.
C. Neighbors maintain communication with the restarting router.
D. The restarting router sends gratuitous ARP for 30 seconds.
正解：C
解説：
From the partial OSPF (Open Shortest Path First) configuration output:
B: The router sends grace LSAs before it restarts: This is implied by the command 'set restart-mode graceful- restart'. When OSPF is configured with graceful restart, the router sends grace LSAs (Link State Advertisements) to inform its neighbors that it is restarting, allowing for a seamless transition without recalculating routes.
Fortinet documentation on OSPF configuration clearly states that enabling graceful restart mode allows the router to maintain its adjacencies and routes during a brief restart period.
質問 # 62
Which two statements about ADVPN are true? (Choose two.)
A. AllFortiGate devices must be in the same autonomous system (AS).
B. The hub adds routes based on IKE negotiations.
C. You must disable add-route in the hub.
D. You must configure phase 2 quick mode selectors to 0.0.0.0 0.0.0.0.
正解：B、D
解説：
C). The hub adds routes based on IKE negotiations: This is part of the ADVPN functionality where the hub learns about the networks behind the spokes and can add routes dynamically based on the IKE negotiations with the spokes.
D). You must configure phase 2 quick mode selectors to 0.0.0.0 0.0.0.0: This wildcard setting in the phase 2 selectors allows any-to-any tunnel establishment, which is necessary for the dynamic creation of spoke-to-spoke tunnels.
These configurations are outlined in Fortinet's documentation for setting up ADVPN, where the hub's role in route control and the use of wildcard selectors for phase 2 are emphasized to enable dynamic tunneling between spokes.
質問 # 63
Refer to the exhibit, which shows a custom signature.
Which two modifications must you apply to the configuration of this custom signature so that you can save it on FortiGate? (Choose two.)
A. Ensure that the header syntax is F-SBID.
B. Start options with --.
C. Add attack_id.
D. Add severity.
正解：C、D
解説：
For a custom signature to be valid and savable on a FortiGate device, it must include certain mandatory fields.
Severity is used to specify the level of threat that the signature represents, and attack_id is a unique identifier for the signature. Without these, the signature would not be complete and could not be correctly utilized by the FortiGate's Intrusion Prevention System (IPS).
質問 # 64
Refer to the exhibits, which contain the network topology and BGP configuration for a hub.
Exhibit A.
Exhibit B.
An administrator is trying to configure ADVPN with a hub and spoke VPN setup using iBGP. All the VPNs are up and connected to the hub. The hub is receiving route information from both spokes over iBGP; however the spokes are not receiving route information from each other.
What change must the administrator make to the hub BGP configuration so that the routes learned from one spoke are forwarded to the other spoke?
A. Configure the hub as a route reflector
B. Configure auto-discovery-sender on the hub
C. Add a prefix list to the hub that permits routes to be shared between the spokes
D. Enable route redistribution under config router bgp
正解：B
質問 # 65
Refer to the exhibit.
which contains a partial configuration of the global system. What can you conclude from this output?
A. Only CPs arc disabled
B. Only NPs are disabled
C. NPs and CPs arc disabled
D. NPs and CPs are enabled
正解：D
解説：
The configuration does not show any explicit disabling of NPs (Network Processors) or CPs (Content Processors). In Fortinet Enterprise Firewall, unless explicitly disabled, these processors are enabled by default to handle specific types of traffic efficiently12. Reference := Hardware acceleration | FortiGate / FortiOS 7.2.2 - Fortinet Documentation, NSE 7 Network Security Architect - Fortinet
