Fortinet NSE7_EFW-6.4 : Fortinet NSE 7 - Enterprise Firewall 6.4

Fortinet NSE 7 - Enterprise Firewall 6.4은 출제 범위가 넓고 난도가 높아 혼자 준비하기 쉽지 않은 시험입니다. ITDumpsKR의 NSE7_EFW-6.4 모의고사는 2026년 최신 출제 경향을 반영해 구성되었습니다. 검증된 자료로 효율적으로 대비하시기 바랍니다.

Fortinet NSE7_EFW-6.4 시험 개요:

Fortinet NSE7_EFW-6.4 시험 요강 주제:

Fortinet NSE 7 - Enterprise Firewall 6.4 궁금증 총정리

최신 NSE 7 Network Security Architect NSE7_EFW-6.4 무료샘플문제

문제 #1

An administrator wants to capture ESP traffic between two FortiGates using the built-in sniffer. If the administrator knows that there is no NAT device located between both FortiGates, what command should the administrator execute?

A. diagnose sniffer packet any 'udp port 500 or udp port 4500'
B. diagnose sniffer packet any 'esp'
C. diagnose sniffer packet any 'udp port 4500'
D. diagnose sniffer packet any 'udp port 500'

문제 #2

Which of the following statements is true regarding a FortiGate configured as an explicit web proxy?

A. FortiGate limits the number of workstations that authenticate using the same web proxy user credentials. This limit CANNOT be modified by the administrator.
B. FortiGate limits the number of simultaneous sessions per explicit web proxy user The limit CAN be modified by the administrator
C. FortiGate limits the number of simultaneous sessions per explicit web proxy user. This limit CANNOT be modified by the administrator.
D. FortiGate limits the total number of simultaneous explicit web proxy users.

문제 #3

View the exhibit, which contains a session entry, and then answer the question below.

Which statement is correct regarding this session?

A. It is an ICMP session from 10.1.10.10 to 10.200.5.1.
B. It is a TCP session in CLOSE_WAIT state from 10.1.10.10 to 10.200.1.1.
C. It is an ICMP session from 10.1.10.10 to 10.200.1.1.
D. It is a TCP session in ESTABLISHED state from 10.1.10.10 to 10.200.5.1.

문제 #4

Which the following events can trigger the election of a new primary unit in a HA cluster? (Choose two.)

A. One of the monitored interfaces in the primary unit is disconnected.
B. The FortiGuard license for the primary unit is updated.
C. A secondary unit is removed from the HA cluster.
D. Primary unit stops sending HA heartbeat keepalives.

문제 #5

Which statement about the designated router (DR) and backup designated router (BDR) in an OSPF multi-access network is true?

A. BDR is responsible for forwarding link state information from one router to another.
B. Non-DR and non-BDR routers will form full adjacencies to DR and BDR only.
C. Only the DR receives link state information from non-DR routers.
D. FortiGate first checks the OSPF ID to elect a DR.

질문과 대답: