860 お客様のコメント
質問 1：
Which statement about IKEv2 is true?
A. IKEv1and IKEv2 have enough of the header format in common that both versions can run over the same UDP port.
B. IKEv1and IKEv2 use same TCP port but run on different UDP ports.
C. Both IKEv1and IKEv2 share the feature of asymmetric authentication.
D. IKEv1and IKEv2 share the concept of phase1and phase2.
正解：A
質問 2：
An administrator wants to capture encrypted phase 2 traffic between two FotiGate devices using the built-in sniffer.
If the administrator knows that there Is no NAT device located between both FortiGate devices, which command should the administrator run?
A. diagnose sniffer packet any 'udp port 4500'
B. diagnose sniffer packet any 'udp port 500'
C. diagnose sniffer packet any 'ah'
D. diagnose sniffer packet any 'lp proto 50'
正解：D
質問 3：
Exhibit.
Refer to the exhibit, which shows a partial web fillet profile configuration.
Which action does FortiGate lake if a user attempts to access www. dropbox. com, which is categorized as File Sharing and Storage?
A. FortiGate blocks the connection, based on the FortiGuard category based filter configuration.
B. FortiGate allows the connection, based on the URL Filter configuration.
C. FortiGate exempts the connection, based on the Web Content Filter configuration.
D. FortiGate blocks the connection as an invalid URL.
正解：A
質問 4：
Which statement about parallel path processing is correct (PPP)?
A. Software configuration has no impact on PPP.
B. PPP chooses froma group of parallel options lo identity the optimal path tor processing a packet.
C. PPP does not apply to packets that are part of an already established session.
D. Only FortiGate hardware configurations affect the path that a packet takes.
正解：B
Which statement about IKEv2 is true?
A. IKEv1and IKEv2 have enough of the header format in common that both versions can run over the same UDP port.
B. IKEv1and IKEv2 use same TCP port but run on different UDP ports.
C. Both IKEv1and IKEv2 share the feature of asymmetric authentication.
D. IKEv1and IKEv2 share the concept of phase1and phase2.
正解：A
質問 2：
An administrator wants to capture encrypted phase 2 traffic between two FotiGate devices using the built-in sniffer.
If the administrator knows that there Is no NAT device located between both FortiGate devices, which command should the administrator run?
A. diagnose sniffer packet any 'udp port 4500'
B. diagnose sniffer packet any 'udp port 500'
C. diagnose sniffer packet any 'ah'
D. diagnose sniffer packet any 'lp proto 50'
正解：D
質問 3：
Exhibit.
Refer to the exhibit, which shows a partial web fillet profile configuration.
Which action does FortiGate lake if a user attempts to access www. dropbox. com, which is categorized as File Sharing and Storage?
A. FortiGate blocks the connection, based on the FortiGuard category based filter configuration.
B. FortiGate allows the connection, based on the URL Filter configuration.
C. FortiGate exempts the connection, based on the Web Content Filter configuration.
D. FortiGate blocks the connection as an invalid URL.
正解：A
質問 4：
Which statement about parallel path processing is correct (PPP)?
A. Software configuration has no impact on PPP.
B. PPP chooses froma group of parallel options lo identity the optimal path tor processing a packet.
C. PPP does not apply to packets that are part of an already established session.
D. Only FortiGate hardware configurations affect the path that a packet takes.
正解：B
Asano -
FCSS_NST_SE-7.4基本的なところから解説してくれるので、
とてもわかりやすいです。コレを見えると改めてわかることが多かったので社会人前に呼んでおくのもいいなと思いました。