考题篇(6.2) 05 ❀ FortiManager ❀ Fortinet 网络安全专家 NSE 5
Refer to the exhibit. Given the configurations shown in the exhibit, what can you conclude from the installation targets in the Install On column? 〖查看下列图片，根据展示中显示的配置，你可以从Install On列中的安装目标得出什么结论?〗
A. Policy seq.# 3 will not be installed on any managed device. 〖3号策略不会安装在任何托管设备上。〗
B. Policy seq.# 3 will be installed on the Trainer[NAT] VDOM only. 〖3号策略将只安装在Trainer[NAT] VDOM上。〗
C. Policy seq.# 3 will be installed on all managed devices and VDOMs that are listed under Installation Targets. 〖3号策略将安装在安装目标下列出的所有被管理设备和VDOM上。〗
D. The Install On column value represents successful installations on the managed devices. 〖Install On列值表示在被管理设备上成功安装。〗
【分析】
通过单击Install On列，可以为实际策略中的每个规则执行粒度安装目标。这允许你添加、删除目标设备，或设置为默认值。
【答案】C
View the following exhibit. 〖查看下列图片。〗
Which one of the following statements is true regarding installation targets in use Install On column? 〖关于安装目标在使用安装列以下哪个陈述是正确的?〗
A. The Install On column value represents successful installation on the managed devices 〖Install On列值表示在被管理设备上成功安装〗
B. Policy seq.# 3 will be installed on all managed devices and VDOMs that are listed under Installation Targets 〖3号策略将安装在安装目标下列出的所有被管理的设备和VDOM上〗
C. Policy seq.# 3 will be installed on the Trainer[NAT] VDOM only 〖3号策略将只安装在Trainer[NAT] VDOM上〗
D. Policy seq.# 3 will be not installed on any managed device 〖3号策略将不会安装在任何被管理设备上〗
【分析】
通过单击Install On列，可以为实际策略中的每个规则执行粒度安装目标。这允许你添加、删除目标设备，或设置为默认值。
【答案】B
Setting workspace-mode to normal, as shown in the exhibit, allows what on FortiManager? (Choose two) 〖将工作区模式设置为正常，允许在FortiManager上进行操作? (选择两个)〗
config system global
set workspace-mode normal
end
A. ADOM locking 〖ADOM锁定〗
B. VDOM locking 〖VDOM锁定〗
C. Unrestricted concurrent access 〖不受限制的并发访问〗
D. Restricted concurrent access 〖受限制的并发访问〗
【分析】
你可以使用CLI或GUI来启用工作区模式并防止并发的ADOM访问。允许管理员锁定他们的ADOM、设备或策略包。此外，只有一个管理员对ADOM具有读写访问权限，而其他所有管理员都具有只读访问权限。
【答案】A D
What does a policy package status of Modified indicate? 〖策略包状态Modified表示什么?〗
A. FortiManager is unable to determine the policy package status. 〖FortiManager无法确定策略包的状态。〗
B. The policy package was never imported after a device was registered on FortiManager.〖在FortiManager上注册设备后，策略包从未导入。〗
C. Policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager. 〖已在被管理设备上更改了策略配置，尚未将更改导入FortiManager。〗
D. Policy package configuration has been changed on FortiManager and changes have not yet been installed on the managed device. 〖在FortiManager上已经更改了策略包配置，被管理设备上尚未安装更改。〗
【分析】
Modified：在FortiManager上修改了策略包配置，且未推送到被管理设备
【答案】D
When a FortiManager HA primary device fails, which two statements are correct for promoting a secondary device to the primary role? (Choose two) 〖当FortiManager HA主设备故障时，哪两条语句可以正确地将从设备提升为主设备?(选择两个)〗
A. Must manually reconfigure one of the secondary device to become the master device. 〖必须手动重新配置一个从设备成为主设备。〗
B. Reboot is required when promoting from secondary to primary. 〖从次升级到主时需要重新引导。〗
C. All other secondary devices must be reconfigured to point to new primary device. 〖所有其他从设备必须重新配置为指向新的主设备。〗
D. The FortiManager HA suports IP takeover where an HA state transition does not require manual intervention. 〖FortiManager HA支持IP接管，其中HA状态转换不需要手动干预。〗
【分析】
如果主设备故障，管理员必须执行以下操作，使FortiManager HA恢复工作状态：1. 手动重新配置一个从设备成为主设备。2. 重新配置所有其他从设备以指向新的主设备。你不需要重新启动从辅助设备升级到主要设备的设备。
【答案】A C
How are the points calated when using FortiMeter to deploy FortiOS-VM? (Choose two.) 〖当使用FortiMeter部署FortiOS-VM时，如何计算点?(选择两个)〗
A. Based on the number of sessions on the mgmt interface of FortiOS-VM. 〖根据FortiOS-VM的mgmt接口会话数。〗
B. Based on the FortiGuard service option enabled for FortiOS-VM. 〖基于FortiOS-VM中开启的FortiGuard服务选项。〗
C. Based on the traffic usage on port1 and port2 on FortiOS-VM. 〖基于FortiOS-VM端口1和端口2的流量占用率。〗
D. Based on the amount of traffic (per GB) passing through the FortiOS-VM. 〖基于通过FortiOS-VM的流量(每GB)。〗
【分析】
对于标准许可证模式, 点计算基于通过 FortiOS VM 接口传递的通信量。每个 tb 的通信量都使用点, 当你增加使用中的 FortiGuard 服务选项时, 会增加点成本。
【答案】B C
What does the diagnose dvm check-integrity command do? (Choose two.) 〖diagnose dvm check-integrity命令的作用是什么?(选择两个)〗
A. Internally upgrades existing ADOMs to the same ADOMs version in order to clean up and correct the ADOMsyntax 〖在内部将现有ADOM升级为相同的ADOM版本，以清理和纠正ADOM语法〗
B. Verifies and corrects unregistered, registered, and deleted device states 〖验证和纠正未注册、已注册和已删除的设备状态〗
C. Verifies and corrects database schemas in all object tables 〖验证和纠正所有对象表中的数据库模式〗
D. Verifies and corrects duplicate VDOM entries 〖验证和纠正重复的VDOM条目〗
【分析】
如果你执行一个数据库完整性命令，对数据库进行了更改或修正，那么建议你重新运行该命令，以验证是否正确地进行了任何更改或修正。
【答案】B D
An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package, Fortinet, in the custom ADOM1. 〖管理员为自定义ADOM1分配了一个全局策略包。然后，管理员在自定义ADOM1中创建一个新的策略包Fortinet。〗
Which statement about the global policy package assignment to the newly-created policy package Fortinet is true? 〖关于全局策略包分配给新制定策略包Fortinet的说法，哪一个是正确的?〗
A. When a new policy package is created, it automatically assigns the global policies to the new package. 〖创建新策略包时，它会自动将全局策略分配给新包。〗
B. When a new policy package is created, you need to assign the global policy package from the global ADOM. 〖创建新策略包时，需要从全局ADOM分配全局策略包。〗
C. When a new policy package is created, you need to reapply the global policy package to the ADOM. 〖创建新策略包时，需要将全局策略包重新应用到ADOM。〗
D. When a new policy package is created, you can select the option to assign the global policies to the new package. 〖创建新策略包时，可以选择将全局策略分配给新包的选项。〗
【分析】
【答案】A
What type of access is automatically enabled on an interface after it is added to FortiClient Manager? 〖接口添加到FortiClient Manager后，什么类型的访问会自动启用?〗
A. Device Detection
B. FortiTelemetry
C. CAPWAP
D. FMG-Access
【分析】
【答案】B
Which two statements are correct regarding FortiGuard features on FortiManager?(Choose two)〖关于在FortiManager上的FortiGuard功能哪些描述是正确的？(选择两个)〗
A. FortiManager can function as a local FortiGuard Distribution Server (FDS). 〖FortiManager可以作为本地的FortiGuard Distribution Server (FDS)。〗
B. In FortiManger HA only master FortiManager can act as an FDS server. 〖在FortiManager HA中，只有master FortiManager可以作为FDS服务器。〗
C. When FortiManager is configured for closed network operation, it can connect to public FDS servers to obtain managed device information and sync packages. 〖当FortiManager配置为封闭网络运行时，可以连接公共FDS服务器，获取被管理设备信息和同步包。〗
D. FortiGuard information is not synchronized across a FortiManager cluster. 〖FortiGuard信息没有跨FortiManager集群进行同步。〗
【分析】
【答案】A D
考题篇(6.2) 05 ❀ FortiManager ❀ Fortinet 网络安全专家 NSE 5相关推荐
- 考题篇(6.2) 05 ❀ FortiGate ❀ Fortinet 网络安全专家 NSE 4
Examine this PAC file configuration.[检查这个PAC文件配置.] Which of the following statements are true? (Cho ...
- 考题篇(6.2) 07 ❀ FortiGate ❀ Fortinet 网络安全专家 NSE 4
Which statement about the IP authentication header (AH) used by IPsec is true? [关于IPsec使用的IP认证头(AH ...
- 考题篇(6.2) 02 ❀ FortiGate ❀ Fortinet 网络安全专家 NSE 4
Which of the following statements are best practices for troubleshooting FSSO? (Choose two.) [下列哪个 ...
- 考题篇(6.2) 11 ❀ FortiGate ❀ Fortinet 网络安全专家 NSE 4
An administration wants to throttle the total volume of SMTP sessions to their email server. [管理人员希 ...
- 考题篇(6.2) 09 ❀ FortiGate ❀ Fortinet 网络安全专家 NSE 4
An administrator wants to block HTTP uploads. Examine the exhibit, which contains the proxy address ...
- 教程篇(6.4) 07. 诊断和故障排除 ❀ FortiManager ❀ Fortinet 网络安全专家 NSE 5
在本课中,你将学习如何诊断和排除与FortiManager和被管理设备相关的问题. 在这节课中,你将学习这张幻灯片上显示的主题. 完成此部分后,你应该能够实现此幻灯片上显示的目标. 通过展示理解 ...
- 教程篇(6.4) 03. 设备注册 ❀ FortiManager ❀ Fortinet 网络安全专家 NSE 5
在本节课中,你将了解设备管理器窗格的主要功能,以及如何使用FortiManager管理FortiGate. 在这节课中,你将探索这张幻灯片上显示的主题. 完成此部分后,你应该能够实现此幻灯片上显 ...
- 考题篇(7.0) 11 ❀ FortiGate防火墙 ❀ Fortinet 网络安全专家 NSE 4
To complete the final step of a Security Fabric configuration, an administrator must authorize all ...
- 教程篇(7.0) 05. 通过FortiClient EMS发放FortiClient ❀ FortiClient EMS ❀ Fortinet 网络安全专家 NSE 5
在本课中,你将学习如何使用FortiClient EMS在终端上提供FortiClient. 通过展示FortiClient配置的能力,你将能够创建终端策略和配置文件,以及启用不同的FortiCl ...
最新文章
- 今天，苹果遭遇大宕机
- Oracle 11g AMM与ASMM切换
- Spring Cloud Alibaba基础教程：支持的几种服务消费方式（RestTemplate、WebClient、Feign）
- Bug错误openssl_encrypt()
- c语言格式化输入字符型,C语言——字符串和格式化输入/输出
- java实现发送邮箱邮件
- 初学Linux之程序安装
- 在WinAVR中设置Makefile自动编译多个源文件
- 在数据库中outlet、code、outline为联合组件。hibarnate插入可如此插入
- Java多线程---线程通信（wait,notifyAll，生产者消费者经典范式，owner wait set，自定义显式锁BooleanLock）
- 在html中控制自动换行
- 开源开发工具_3个开源行为驱动的开发工具
- Ubuntu Install Java
- [翻译]XNA 3.0 Game Programming Recipes之forty-eight
- 基建管控系统_催生智慧园区三维管控系统解决方案，新基建背景下构建可视化监控平台...
- 阶段3 2.Spring_04.Spring的常用注解_2 常用IOC注解按照作用分类
- Oracle客户端完整版下载地址
- android安卓手机变身无线网卡，实现“畅无线“电脑版”台式机笔记本通杀！
- 第八章第五题（代数：两个矩阵相加）（Algebra: adding two matrices）
- Chromium网页Layer Tree绘制过程分析