818 お客様のコメント
クリック」
質問 1：
Which statements best describe auto discovery VPN (ADVPN). (Choose two.)
A. ADVPN is only supported with IKEv2.
B. It requires the use of dynamic routing protocols so that spokes can learn the routes to other spokes.
C. Every spoke requires a static tunnel to be configured to other spokes so that phase 1 and phase 2 proposals are defined in advance.
D. Tunnels are negotiated dynamically between spokes.
正解：B,D
質問 2：
Which of the following statements about policy-based IPsec tunnels are true? (Choose two.)
A. They require two firewall policies: one for each directions of traffic flow.
B. They can be configured in both NAT/Route and transparent operation modes.
C. They support GRE-over-IPsec.
D. They support L2TP-over-IPsec.
正解：B,D
質問 3：
Which statements about a One-to-One IP pool are true? (Choose two.)
A. It does not use port address translation.
B. It allows the fixed mapping of an internal address range to an external address range.
C. It allows the configuration of ARP replies.
D. It is used for destination NAT.
正解：A,C
質問 4：
How does FortiGate select the central SNAT policy that is applied to a TCP session?
A. It selects the SNAT policy specified in the configuration of the firewall policy that matches the traffic.
B. It selects the SNAT policy specified in the configuration of the outgoing interface.
C. It selects the first matching central SNAT policy, reviewing from top to bottom.
D. It selects the central SNAT policy with the lowest priority.
正解：C
解説: (Pass4Test メンバーにのみ表示されます)
質問 5：
On a FortiGate with a hard disk, how can you upload logs to FortiAnalyzer or FortiManager? (Choose two.)
A. store-and-upload
B. on-demand
C. real time
D. hourly
正解：A,C
解説: (Pass4Test メンバーにのみ表示されます)
質問 6：
Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides (client and server) have terminated the session?
A. To generate logs
B. To allow for out-of-order packets that could arrive after the FIN/ACK packets.
C. To remove the NAT operation.
D. To finish any inspection operations.
正解：B
Which statements best describe auto discovery VPN (ADVPN). (Choose two.)
A. ADVPN is only supported with IKEv2.
B. It requires the use of dynamic routing protocols so that spokes can learn the routes to other spokes.
C. Every spoke requires a static tunnel to be configured to other spokes so that phase 1 and phase 2 proposals are defined in advance.
D. Tunnels are negotiated dynamically between spokes.
正解：B,D
質問 2：
Which of the following statements about policy-based IPsec tunnels are true? (Choose two.)
A. They require two firewall policies: one for each directions of traffic flow.
B. They can be configured in both NAT/Route and transparent operation modes.
C. They support GRE-over-IPsec.
D. They support L2TP-over-IPsec.
正解：B,D
質問 3：
Which statements about a One-to-One IP pool are true? (Choose two.)
A. It does not use port address translation.
B. It allows the fixed mapping of an internal address range to an external address range.
C. It allows the configuration of ARP replies.
D. It is used for destination NAT.
正解：A,C
質問 4：
How does FortiGate select the central SNAT policy that is applied to a TCP session?
A. It selects the SNAT policy specified in the configuration of the firewall policy that matches the traffic.
B. It selects the SNAT policy specified in the configuration of the outgoing interface.
C. It selects the first matching central SNAT policy, reviewing from top to bottom.
D. It selects the central SNAT policy with the lowest priority.
正解：C
解説: (Pass4Test メンバーにのみ表示されます)
質問 5：
On a FortiGate with a hard disk, how can you upload logs to FortiAnalyzer or FortiManager? (Choose two.)
A. store-and-upload
B. on-demand
C. real time
D. hourly
正解：A,C
解説: (Pass4Test メンバーにのみ表示されます)
質問 6：
Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides (client and server) have terminated the session?
A. To generate logs
B. To allow for out-of-order packets that could arrive after the FIN/ACK packets.
C. To remove the NAT operation.
D. To finish any inspection operations.
正解：B
瑞原** -
NSE4_FGT-6.2問題集は素晴らしい資料です。三週間ぐらい勉強し、いい点数を取って、NSE4_FGT-6.2試験に合格しました。