EFW-7.6_在线真题试卷与模拟练习_EFW-7.6

更新时间：试题数量：购买人数：提供作者：

有效期：个月

章节介绍：共有个章节

我的练习

我的错题
(0道)

我的收藏
(0道)

我的斩题
(0道)

我的笔记
(0道)

专项练习

顺序练习 0 / 0

随机练习 自定义设置练习量

题型乱序 按导入顺序练习

模拟考试 仿真模拟

题型练习 按题型分类练习

易错题 精选高频易错题

学习资料 考试学习相关信息

搜索

题库预览

You must minimize CPU and RAM use on a FortiGate firewall while also enabling essential security features, such as web filtering and application coontrol for HTTPS traffic.

Which SSL inspection setting reduces system load while aIso enabling security features, such as web filtering and application control for encrypted HTTPS traffic?

Refer to the exhibits.

（含图）

The configuration of Windows PC, PC 1, with a default MTU of 1500 bytes, FortiGate interfaces with an MTU of 1000 bytes, and the results of PC 1 pinging over server 172.16.0.251 are shown.

Why is the PC 1 user unable to ping server 172.16.0.254 and seeing the message: Packet needs to be fragmented but DF set?

Refer to the exhibit.

（含图）

A network topology and a FortiGate routing table is shown.

What must you configure in the BGP section to add only the subnet 100.64.2.0/24 in the routing table of FortiGate_A?

Refer to the exhibit.

（含图）

An HA configuration of an active-active (A-A) cluster with the same HA uptime shown.

You want HQ-NGFW-2 to handle the Core2 VDOM traffiic.

Which modification must you make to achieve this outcome?

You receive a FortiAnalyzer alert warning that a 1 TB disk filled up in a day. Upon investigation, you find thousands of unusual DNS log requlests, such as JHCMQK.website.com, with no answers. You later discover that DNS exfiltration is occurring through both UDP and TLS.

How can you prevent this data theft technique?

Refer to the exhibit.

（含图）

Based on the exhibit, what is the first message that Spolxe 1 replies to the hub instructing it to bring up the dynamic tunnel if a client generatestraffic destined to Spoke 2?

Refer to the exhibit.

（含图）

An OSPF network is shown.

Which configuration must you apply to optimize the OSPF database?

Refer to the exhibits.

（含图）

The system administrator settings configured on a root FortiGaate and the Security Fabric settings configured on a downstream FortiGate are sshown. When prompted to sign in with Security Fabric to the downstream FortiGate. a usler enters the single

sign-on (SSO) provider credentials.

What happens next for the user?

Refer to the exhibit.

（含图）

The ADVPN IPsec interface represents the VPN IPsec phase 1 from Hub A to Spoke 1 and Spoke 2, and from Hub B to Spoke 3 and Spoke 4.

You must configure an ADVPN using IBGP and EBGP to connect Overlay 1 with Overlay 2.

Which parameters must you configure in the phase 1 VPN IPsec conffiguration of the ADVPN tunnels?

Refer to the exhibit.

（含图）

You are deploying a hub and spokes network and using OSPF as a dynamic protocol.

Which configuration is recommended for neighbor adjacency through tlne hub?

Refer to the exhibit.

（含图）

A network diagram showing the corporate network and a new remote office network is shown.

You must integrate the new remote office network with the corporate enterprise network.

What must you do to allow routing between the two networks?

Refer to the exhibit.

（含图）

The status of a new BGP configuration on FortiGate is shown.

Based on the output shown in the exhibit, which configuration should you consider next?

Refer to the exhibit.

（含图）

A partial VPN configuration is shown.

Which statement about this VPN IPsec phase 1 configuration is correct ?

Refer to the exhibit.

（含图）

A revision history window at the FortiManager device layer is showrn. The IT team is trying to identify the administrator responsible for the most recent update to the FortiGate device database.

What can the IT team conclude?

Refer to the exhibits.

（含图）

A policy package conflict status and information from the import device wizard in the Core1 VDOM are shown.

When you import a policy package, the following message appears for the Web_restrictions web filter profile and the deep inspection SSIL-SSH profile:

The following objects were found having conflicts. Please confirm your settings , then continue.

The Web_restrictions_and deep-inspection profiles are used by other FortiGate devices within FortiManager.

Which step must you take to resolve the issue?

In a transparent VDOM interface, what does the command set forward-domain <domain_ID> do?

Which action can you take on FortiGate to block traffic using intrusion prevention system (IPS) protocol decoders, focusing on etwork transmission patterns and application signatures ?

You need an internal segmentation firewall (ISFW) FortiGate for a campus with an ultralow latency interface.

Which FortiGate should you select ?

A vulnerability scan report has revealed that a user has generated traffic to the website example.com using a weak SSUTLS version supported by the HTTPS web server.

What can you do to block all outdated SSL/TLS versions on any HTTPS web server to prevent possible attacks on user traffic?

You are setting up an ADVPN configuration and want to ensure that peer IDs are not exposed during VPN establishment.

Which protocol can the administrator use to enhance security?

1 2 3 4

更多题库