[2025年02月最新リリース]FCSS_EFW_AD-7.4試験問題はあなたをパスさせる
Fortinet FCSS_EFW_AD-7.4試験基本問題とアンサー
質問 # 38
How does FortiManager handle FortiGuard requests from FortiGate devices, when it is configured as a local FDS?
- A. FortiManager can download and maintain local copies of FortiGuard databases.
- B. FortiManager does not support rating requests.
- C. FortiManager will respond to update requests only if they originate from a managed device.
- D. FortiManager supports only FortiGuard push to managed devices.
正解：A
質問 # 39
What are valid options for handling DNS requests sent directly to a FortiGates interface IP? (Choose three.)
- A. Iterative.
- B. Non-recursive.
- C. Conditional-forward.
- D. Forward-only.
- E. Recursive.
正解：B、D、E
質問 # 40
In which order are firewall policies processed on a FortiGate unit?
- A. From top to down, according with their policy ID number.
- B. From top to down, according with their sequence number.
- C. Based on the priority value.
- D. Based on best match.
正解：B
質問 # 41
Which two conditions would prevent a static route from being added to the routing table? (Choose two.)
- A. The interface specified in the route configuration is down
- B. The next-hop IP address is unreachable.
- C. The route has a lower priority value than another route to the same destination.
- D. There is another other route to the same destination, with a lower distance.
正解：A、D
質問 # 42
View the exhibit, which contains a partial web filter profile configuration, and then answer the question below.
Which action will FortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?
- A. FortiGate will allow the connection based on the FortiGuard category based filter configuration.
- B. FortiGate will exempt the connection based on the Web Content Filter configuration
- C. FortiGate will block the connection based on the URL Filter configuration.
- D. FortiGate will block the connection as an invalid URL.
正解：C
質問 # 43
Refer to the exhibit, which shows a session entry.
Which statement about this session is true?
- A. It is a TCP session in close_wait state, from 10. l. 10.10 to 10.200.1.1.
- B. It is an ICMP session from 10.1.10.10 to 10.200.1.1.
- C. It is an ICMP session from 10.1.10.10 to 10.200.5. 1.
- D. It is a TCP session in the established state, from 10.1.10.10 to 10.200.5.1.
正解：C
質問 # 44
Refer to the exhibit, which contains partial outputs from two routing debug commands.
Which outbound interface will FortiGate use to route web traffic from internal users to the Internet?
- A. port3
- B. Both port1 and port2
- C. port1
- D. port2
正解：C
質問 # 45
Examine the partial output from two web filter debug commands; then answer the question below:
Based on the above outputs, which is the FortiGuard web filter category for the web site www.fgt99.com?
- A. General organization.
- B. Information technology.
- C. Business.
- D. Finance and banking
正解：B
質問 # 46
Which step can be taken to ensure that only FortiAP devices receive IP addresses from a DHCP server on FortiGate?
- A. Configure a VCI string value of FortiAP in the DHCP server settings
- B. Use DHCP option 138 to assign IPs to FortiAP devices
- C. Change the interface addressing mode to FortiAP devices
- D. Create a reservation list in the DHCP server settings
正解：A
質問 # 47
An administrator is configuring ADVPN in a hub-and-spoke topology. The administrator will use IBGP to route traffic between the VPN sites.
Which IBGP setting needs to be enabled on the hub, for dynamic routing to work properly for on-demand tunnels?
- A. next-hop-self
- B. route-reflector-client
- C. route-server-client
- D. ibgp-multipath
正解：B
質問 # 48
Which of the following tasks are part of the manual registration process for adding a FortiGate to a FortiManager for central management? (Choose three.)
- A. Import the policy package from the managed FortiGate.
- B. Add the FortiManager IP address to the FortiGate's central management configuration.
- C. Wait for the rating databases to download on FortiManager.
- D. In the FortiManager, add the unregistered FortiGate.
- E. Start the rating services on FortiManager.
正解：A、B、D
質問 # 49
Which two tasks are automated using the Import Configuration wizard on FortiManager? (Choose two.)
- A. Importing static and dynamic route configurations from managed devices
- B. Importing devices to FortiManager
- C. Importing firewall address objects from managed devices
- D. Importing interface mappings from managed devices
正解：C、D
質問 # 50
Four FortiGate devices configured for OSPF connected to the same broadcast domain. The first unit is elected as the designated router.
The second unit is elected as the backup designated router.
Under normal operation, how many OSPF full adjacencies are formed to each of the other two units?
- A. 0
- B. 1
- C. 2
- D. 3
正解：C
質問 # 51
Examine the following partial output from two system debug commands; then answer the question below.
Which of the following statements are true regarding the above outputs? (Choose two.)
- A. The unit is running a 32-bit FortiOS
- B. The unit is in kernel conserve mode
- C. Kernel indirectly accesses the low memory (Low Total) through memory paging
- D. The Cached value is always the Active value plus the Inactive value
正解：A、D
質問 # 52
Which layer of the FortiOS architecture does an application process or daemon run on?
- A. Kernel
- B. User space
- C. Configuration layer
- D. Hardware
正解：B
質問 # 53
Which ADVPN configuration must be configured using a script on FortiManager, when using VPN Manager to manage FortiGate VPN tunnels?
- A. Set protected network to all
- B. Configure IP addresses on IPsec virtual interfaces
- C. Enable AD-VPN in IPsec phase 1
- D. Disable add-route on hub
正解：C
質問 # 54
View the central management configuration shown in the exhibit, and then answer the question below.
Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?
- A. 0.0.1.244
- B. 10.0.1.240
- C. 10.0.1.242
- D. One of the public FortiGuard distribution servers
正解：D
質問 # 55
Refer to the exhibit, which shows the output of a web filtering diagnose command.
Which configuration change would result in non-zero results in the cache statistics section?
- A. set ngfw-mode policy-based under config system settings
- B. set webfilter-force-off disable under config system fortiguard
- C. set server-type rating under config system central-management
- D. set webfilter-cache enable under config system fortiguard
正解：D
質問 # 56
A FortiGate is rebooting unexpectedly without any apparent reason.
What troubleshooting tools could an administrator use to get more information about the problem?
(Choose two.)
- A. Policy monitor.
- B. Logs.
- C. Crashlogs.
- D. Firewall monitor.
正解：B、C
質問 # 57
In which of the following states is a given session categorized as ephemeral? (Choose two.)
- A. A TCP session waiting for FIN ACK.
- B. A TCP session waiting to complete the three-way handshake.
- C. A UDP session with only one packet received.
- D. A UDP session with packets sent and received.
正解：B、C
質問 # 58
......
2025年最新のリアルな無料Fortinet FCSS_EFW_AD-7.4試験問題集問題と解答：https://jp.fast2test.com/FCSS_EFW_AD-7.4-premium-file.html