다운로드 Fortinet : NSE7_EFW-6.0 질문 & 답 PDF & Test Software

2026년 NSE7_EFW-6.0 시험의 최신 출제 경향이 궁금하신가요? PassTIP의 Fortinet NSE 7 - Enterprise Firewall 6.0 연습문제 92문항은 시험 내용 변경 여부를 주기적으로 점검하며 관리되고 있습니다.

Fortinet NSE7_EFW-6.0 시험 개요:

Fortinet NSE7_EFW-6.0 시험 요강 주제:

Fortinet NSE7_EFW-6.0 시험 Q&A 한눈에 보기

최신 NSE 7 Network Security Architect NSE7_EFW-6.0 무료샘플문제

문제 #1

An administrator added the following Ipsec VPN to a FortiGate configuration:
configvpn ipsec phasel -interface
edit "RemoteSite"
set type dynamic
set interface "portl"
set mode main
set psksecret ENC LCVkCiK2E2PhVUzZe
next
end
config vpn ipsec phase2-interface
edit "RemoteSite"
set phasel name "RemoteSite"
set proposal 3des-sha256
next
end
However, the phase 1 negotiation is failing. The administrator executed the IKF real time debug while attempting the Ipsec connection. The output is shown in the exhibit.


What is causing the IPsec problem in the phase 1 ?

A. The pre-shared key is wrong
B. The phrase-1 mode must be changed to aggressive
C. The incoming IPsec connection is matching the wrong VPN configuration
D. NAT-T settings do not match

문제 #2

When does a RADIUS server send an Access-Challenge packet?

A. The server does not have the user credentials yet.
B. The server requires more information from the user, such as the token code for two-factor authentication.
C. The user account is not found in the server.
D. The user credentials are wrong.

문제 #3

The logs in a FSSO collector agent (CA) are showing the following error:
failed to connect to registry: PIKA1026 (192.168.12.232)
What can be the reason for this error?

A. The CA cannot reach the FortiGate with the IP address 192.168.12.232.
B. The FortiGate cannot resolve the name of the workstation.
C. The CA cannot resolve the name of the workstation.
D. The remote registry service is not running in the workstation 192.168.12.232.

문제 #4

What is the purpose of an internal segmentation firewall (ISFW)?

A. It splits the network into multiple security segments to minimize the impact of breaches.
B. It inspects incoming traffic to protect services in the corporate DMZ.
C. It is an all-in-one security appliance that is placed at remote sites to extend the enterprise network.
D. It is the first line of defense at the network perimeter.

문제 #5

Which of the following conditions must be met for a static route to be active in the routing table? (Choose two.)

A. The next-hop IP address is up.
B. The outgoing interface is up.
C. There is no other route, to the same destination, with a higher distance.
D. The link health monitor (if configured) is up.

질문과 대답: