Fortinet Fortinet Certifications NSE7 Questions & Answers

• Question 1:

  What global configuration setting changes the behavior for content-inspected traffic while FortiGate is in system conserve mode?

  A. av-failopen

  B. mem-failopen

  C. utm-failopen

  D. ips-failopen

  Correct Answer: A

• Question 2:

  What configuration changes can reduce the memory utilization in a FortiGate? (Choose two.)

  A. Reduce the session time to live.

  B. Increase the TCP session timers.

  C. Increase the FortiGuard cache time to live.

  D. Reduce the maximum file size to inspect.

  Correct Answer: AD

• Question 3:

  View the exhibit, which contains the output of diagnose sys session stat, and then answer the question

  below.

  

  Which statements are correct regarding the output shown? (Choose two.)

  A. There are 0 ephemeral sessions.

  B. All the sessions in the session table are TCP sessions.

  C. No sessions have been deleted because of memory pages exhaustion.

  D. There are 166 TCP sessions waiting to complete the three-way handshake.

  Correct Answer: AD

• Question 4:

  A FortiGate is rebooting unexpectedly without any apparent reason. What troubleshooting tools could an administrator use to get more information about the problem? (Choose two.)

  A. Firewall monitor.

  B. Policy monitor.

  C. Logs.

  D. Crashlogs.

  Correct Answer: CD

• Question 5:

  Examine the output of the `get router info bgp summary' command shown in the exhibit; then answer the question below.

  

  Which statement can explain why the state of the remote BGP peer 10.200.3.1 is Connect?

  A. The local peer is receiving the BGP keepalives from the remote peer but it has not received any BGP prefix yet.

  B. The TCP session for the BGP connection to 10.200.3.1 is down.

  C. The local peer has received the BGP prefixed from the remote peer.

  D. The local peer is receiving the BGP keepalives from the remote peer but it has not received the OpenConfirm yet.

  Correct Answer: B

• Question 6:

  View the IPS exit log, and then answer the question below.

  # diagnose test application ipsmonitor 3

  ipsengine exit log"

  pid = 93 (cfg), duration = 5605322 (s) at Wed Apr 19 09:57:26 2017

  code = 11, reason: manual

  What is the status of IPS on this FortiGate?

  A. IPS engine memory consumption has exceeded the model-specific predefined value.

  B. IPS daemon experienced a crash.

  C. There are communication problems between the IPS engine and the management database.

  D. All IPS-related features have been disabled in FortiGate's configuration.

  Correct Answer: B

• Question 7:

  View the exhibit, which contains the output of a diagnose command, and the answer the question below.

  

  Which statements are true regarding the Weight value?

  A. Its initial value is calculated based on the round trip delay (RTT).

  B. Its initial value is statically set to 10.

  C. Its value is incremented with each packet lost.

  D. It determines which FortiGuard server is used for license validation.

  Correct Answer: C

• Question 8:

  Which of the following conditions must be met for a static route to be active in the routing table? (Choose three.)

  A. The next-hop IP address is up.

  B. There is no other route, to the same destination, with a higher distance.

  C. The link health monitor (if configured) is up.

  D. The next-hop IP address belongs to one of the outgoing interface subnets.

  E. The outgoing interface is up.

  Correct Answer: ABE

• Question 9:

  The CLI command set intelligent-mode controls the IPS engine's adaptive scanning behavior. Which of the following statements describes IPS adaptive scanning?

  A. Determines the optimal number of IPS engines required based on system load.

  B. Downloads signatures on demand from FDS based on scanning requirements.

  C. Determines when it is secure enough to stop scanning session traffic.

  D. Choose a matching algorithm based on available memory and the type of inspection being performed.

  Correct Answer: D

• Question 10:

  Examine the output of the `get router info ospf interface' command shown in the exhibit; then answer the question below.

  

  Which statements are true regarding the above output? (Choose two.)

  A. The port4 interface is connected to the OSPF backbone area.

  B. The local FortiGate has been elected as the OSPF backup designated router.

  C. There are at least 5 OSPF routers connected to the port4 network.

  D. Two OSPF routers are down in the port4 network.

  Correct Answer: AD