考题篇(5.4) 02 ❀ 企业防火墙 ❀ Fortinet 网络安全架构师 NSE７

 Examine the following partial output from a sniffer command; then answer the question below.  〖检查下列嗅探器命令的部分输出；然后回答下面的问题。〗

　　What is the meaning of the packets dropped counter at the end of the sniffer?  〖嗅探器末端的丢包计数器是什么意思?〗

　　A. Number of packets that didn’t match the sniffer filter.  〖与嗅探器过滤器不匹配的数据包数目。〗

　　B. Number of total packets dropped by the FortiGate.  〖通过FortiGate丢弃的数据包总数。〗

　　C. Number of packets that matched the sniffer filter and were dropped by the FortiGate.  〖与嗅探过滤器匹配并被FortiGate丢弃的数据包数目。〗

　　D. Number of packets that matched the sniffer filter but could not be captured by the sniffer.〖与嗅探器过滤器匹配但不能被嗅探器捕获的数据包数目。〗

　　【分析】

　　若要嗅探所有接口中的流量，请使用关键字any作为接口名。

　　按Ctrl+C停止嗅探器，并检查是否有丢失的数据包。如果在嗅探过程中有丢包，这意味着不能捕获与嗅探过滤器匹配的所有流量。因此，你可能需要使用更严格的过滤器再次捕获流量。

　　如果你没有为时间戳指定一个选项，调试将显示从开始运行以来的时间(以秒为单位)。你可以预先设置本地系统时间，以便轻松地将数据包与另一个记录的事件关联起来。

　　【答案】D　　

 

 A FortiGate is configured as an explicit web proxy. Clients using this web proxy are reposting DNS errors when accessing any website. The administrator executes the following debug commands and observes that the n-dns-timeout counter is increasing:   〖FortiGate被配置为显式的web代理。使用此网络代理的客户在访问任何网站时都重新发布DNS错误。管理员执行以下调试命令，并观察到n-dns-timeout计数器正在增加:〗

　　What should the administrator check to fix the problem?  〖管理员应该检查什么来解决这个问题?〗

　　A. The connectivity between the FortiGate unit and the DNS server.  〖FortiGate单元与DNS服务器之间的连接。〗

　　B. The connectivity between the client workstations and the DNS server.  〖客户端工作站与DNS服务器之间的连接。〗

　　C. That DNS traffic from client workstations is allowed by the explicit web proxy policies.  〖明确的web代理策略允许来自客户端工作站的DNS通信。〗

　　D. That DNS service is enabled in the explicit web proxy interface.〖该DNS服务在显式web代理接口中启用。〗