考题篇(5.4) 04 ❀ 企业防火墙 ❀ Fortinet 网络安全架构师 NSE７

 A FortiGate's port1 is connected to a private network. Its port2 is connected to the Internet. Explicit web proxy is enabled in port1 and only explicit web proxy users can access the Internet. Web cache is NOT enabled. An internal web proxy user is downloading a file from the Internet via HTTP. Which statements are true regarding the two entries in the FortiGate session table related with this traffic? (Choose two.)  〖FortiGate的端口1连接到一个专用网络。它的端口2与互联网相连。在port1中启用了显式web代理，只有显式web代理用户才能访问Internet。未启用Web缓存。一个内部web代理用户正在通过HTTP从Internet下载文件。关于FortiGate会话表中与此流量相关的两个条目，哪些语句是正确的?(选择两个)〗

　　A.Both session have the local flag on.  〖两个会话都有本地标志〗

　　B.The destination IP addresses of both sessions are IP addresses assigned to FortiGate's interfaces.  〖两个会话的目的IP地址都是分配给FortiGate接口的IP地址〗

　　C.One session has the proxy flag on, the other one does not.  〖一个会话有代理标志，另一个会话没有〗

　　D.One of the sessions has the IP address of port2 as the source IP address.  〖其中一个会话将port2的IP地址作为源IP地址。〗

　　【分析】

 

　　【答案】Ａ Ｄ

 

 Four FortiGate devices configured for OSPF connected to the same broadcast domain. The first unit is elected as the designated router The second unit is elected as the backup designated router Under normal operation, how many OSPF full adjacencies are formed to each of the other two units?  〖四个FortiGate设备配置为OSPF连接到相同的广播域。第一个单元被选为指定路由器，第二个单元被选为备份指定路由器，在正常运作下，与其他两个单元每一个形成多少个OSPF全邻接?〗

　　A.1  

　　B.2    

　　C.3  

　　D.4

　　【分析】

　　在任何多址网络中都有一个DR和一个BDR。具有最高优先级的路由器被选为DR。如果两个或更多的路由器被绑定了最高优先级，那么具有最高OSPF ID的路由器被选为DR。

　　BDR监视DR状态。如果DR失败了，BDR将承担DR的角色。

　　其他路由器仅与DR和BDR形成邻接。DR将链路状态信息从一个路由器转发到另一个路由器。这简化了多址网络中所需的邻接数。

　　【答案】Ｂ

 

 What configuration changes can reduce the memory utilization in a FortiGate? (Choose two.)  〖什么样的配置改变可以减少FortiGate的内存使用?(选择两个)〗

　　A.Reduce the session time to live.  〖减少会话时间〗

　　B.Increase the TCP session timers.  〖增加TCP会话计时器〗

　　C.Increase the FortiGuard cache ti