考题篇(6.2) 02 ❀ 企业防火墙 ❀ Fortinet 网络安全架构师 NSE７

Posted 2021-06-15 meigang2012

 Refer to the exhibit, which contains the output of a debug command. 〖查看下列图片，其中包含调试命令的输出。〗

　　Which two statements about the exhibit are true? (Choose two.)  〖关于上面图片的哪两种说法是正确的?(选择两个)〗

　　A. The local FortiGate OSPF router ID is 0.0.0.4. 〖本地FortiGate OSPF路由器ID为0.0.0.4。〗

　　B. The local FortiGate is the backup designated router. 〖本地的FortiGate是备份的指定路由器。〗

　　C. In the network connected to port4, two OSPF routers are down. 〖日志含义端口4连接的网络中有两台OSPF路由器down。〗

　　D. Port4is connected to the OSPF backbone area. 〖port4连接OSPF骨干区域。〗

　　【分析】

 

　　【答案】A D

 

 Refer to the exhibit, which contains the output of diagnose sys session stat. 〖查看下列图片，其中包含诊断系统会话stat的输出。〗

 

　　Which two statements about the output shown are correct? (Choose two.)  〖关于输出的哪两个语句是正确的?(选择两个)〗

　　A. No sessions have been deleted because of memory pages exhaustion.  〖没有因为内存页耗尽而删除会话。〗

　　B. There are 0 ephemeral sessions.  〖有0个临时会话。〗

　　C. There are 168 TCP sessions waiting to complete the three-way handshake.  〖有168个TCP会话等待完成三次握手。〗

　　D. All the sessions in the session table are TCP sessions. 〖会话表中所有会话都是TCP会话。〗

　　【分析】

 

　　【答案】A B

 

 Refer to the exhibit, which contains central management configuration. 〖查看下列图片，其中包含中央管理配置。〗

　　Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243is experiencing an outage？〖如果10.0.1.243正在经历停机，FortiGate将选择哪台服务器用于防病毒和IPS更新?〗

　　A. 10.0.1.242  

　　B. 10.0.1.244  

　　C. Public FortiGuard servers  

　　D. 10.0.1.240

　　【分析】

 

　　【答案】C

 

 Refer to the exhibit, which contains the output of diagnose sys session list. 〖查看下列图片，其中包含诊断系统会话列表的输出。〗

　　If the HA ID for the primary unit is zero (0), which statement about the output is true? 〖如果主单元的HA ID为零(0)，关于输出的哪个语句为真?〗

　　A. This session cannot be synced with the slave unit.  〖此会话不能与从单元同步。〗

　　B. The inspection of this session has been offloaded to the slave unit.  〖这个会话的检查已经卸载到从属单元。〗

　　C. The master unit is processing this traffic.  〖主单元正在处理此流量。〗

　　D. This session is for HA heartbeat traffic. 〖该会话用于HA心跳流量。〗

　　【分析】

 

　　【答案】C

 

 Refer to the exhibit, which contains the partial output of an IKE real-time debug. 〖查看下列图片，其中包含IKE实时调试的部分输出。〗

　　Why did the tunnel not come up?  〖为什么隧道没有上来?〗

　　A. The pre-shared keys do not match  〖预共享密钥不匹配〗

　　B. The remote gateway phase 1 configuration does not match the local gateway phase 1 configuration.  〖对端网关阶段1配置与本端网关阶段1配置不匹配。〗

　　C. The remote gateway phase 2 configuration does not match the local gateway phase 2 configuration.  〖对端网关阶段2配置与本端网关阶段2配置不匹配。〗

　　D. The remote gateway is using aggressive mode and the local gateway is configured to use main mode.  〖对端网关配置为野蛮模式，本端网关配置为主模式。〗

　　【分析】

 

　　【答案】B

 

 An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link-failed-signalto fix the problem. 〖管理员为HA集群配置了两台FortiGate设备。在测试HA故障转移时，管理员注意到网络中的一些交换机继续将流量发送到前一个主单元。管理员决定启用设置link-failed-signalto修复问题。〗

　　Which statement about this command is true?  〖关于这个命令，哪句话是正确的?〗

　　A. It forces the former primary device to shut down all its non-heartbeat interfaces for one second while the failover occurs.  〖它强制前主设备在故障切换发生时关闭所有非心跳接口一秒钟。〗

　　B. It disables all the non-heartbeat interfaces in all the HA members for two seconds after a failover.  〖故障切换后，关闭所有HA成员的所有非心跳接口2秒。〗

　　C. It sends a link failed signal to all connected devices.  〖它向所有连接的设备发送链路故障信号。〗

　　D. It sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.  〖它向所有连接的设备发送ARP报文，表示故障切换后，HA虚拟MAC地址通过新的主服务器可达。〗

　　【分析】

 

　　【答案】A

 

 What does the dirtyflag mean in a FortiGate session?  〖在FortiGate会话中dirtyflag是什么意思?〗

　　A. The session must be removed from the former primary unit after an HA failover.  〖HA故障切换后，该会话必须从原主单元中移除。〗

　　B. Traffic has been blocked by the antivirus inspection.  〖流量被反病毒检测阻断。〗

　　C. Traffic has been identified as from an application that is not allowed.  〖已识别出来自不允许的应用程序的流量。〗

　　D. The next packet must be re-evaluated against the firewall policies. 〖必须根据防火墙策略重新评估下一个数据包。〗

　　【分析】

 

　　【答案】D

 

 Refer to the exhibit, which contains partial outputs from two routing debug commands.  〖查看下列图片，其中包含两个路由调试命令的部分输出。〗

 

　　Which outbound interface will FortiGate use to route web traffic from internal users to the Internet?  〖FortiGate将使用哪个出站接口将内部用户的web流量路由到Internet?〗

　　A. port3  

　　B. port2  

　　C. port1  

　　D. Both port1and port2

　　【分析】

 

　　【答案】C

 

 Refer to the exhibit, which contains the output of a debug command.  〖查看下列图片，其中包含调试命令的输出。〗

　　Which statement about this FortiGate is correct?  〖关于这个FortiGate的说法哪一个是正确的?〗

　　A. It is currently in system conserve mode because of high CPU usage.  〖由于CPU使用率高，它目前处于系统节省模式。〗

　　B. It is currently in extreme conserve mode because of high memory usage.  〖由于高内存使用量，它目前处于极端节省模式。〗

　　C. It is currently in proxy conserve mode because of high memory usage.  〖由于内存使用率高，它目前处于代理保护模式。〗

　　D. It is currently in memory conserve mode because of high memory usage.  〖由于内存使用率高，它目前处于内存保护模式。〗

　　【分析】

 

　　【答案】D

 

 How does FortiManager handle FortiGate requests from FortiGate devices, when it is configured as a local FDS? 〖当FortiManager被配置为本地FDS时，它如何处理来自FortiGate设备的FortiGate请求?〗

　　A. FortiManager will respond to update requests only from a managed device.  〖FortiManager将只响应来自托管设备的更新请求。〗

　　B. FortiManager can download and maintain local copies of FortiGuard databases.  〖FortiManager可以下载和维护FortiGuard数据库的本地副本。〗

　　C. FortiManager supports only FortiGuard push update to managed devices.  〖FortiManager只支持被管理设备的FortiGuard推送更新。〗

　　D. FortiManager does not support web filter rating requests. 〖FortiManager不支持web过滤器评级请求。〗

　　【分析】

 

　　【答案】B