Fortinet Fortinet Certifications NSE7 Questions & Answers

• Question 31:

  View the exhibit, which contains a partial web filter profile configuration, and then answer the question

  below.

  

  Which action will FortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?

  A. FortiGate will exempt the connection based on the Web Content Filter configuration.

  B. FortiGate will block the connection based on the URL Filter configuration.

  C. FortiGate will allow the connection based on the FortiGuard category based filter configuration.

  D. FortiGate will block the connection as an invalid URL.

  Correct Answer: B

• Question 32:

  An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator noticed that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link- failed-signal to fix the problem. Which statement is correct regarding this command?

  A. Forces the former primary device to shut down all its non-heartbeat interfaces for one second while the failover occurs.

  B. Sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.

  C. Sends a link failed signal to all connected devices.

  D. Disables all the non-heartbeat interfaces in all the HA members for two seconds after a failover.

  Correct Answer: A

• Question 33:

  View the exhibit, which contains the output of a real-time debug, and then answer the question below.

  

  Which of the following statements is true regarding this output? (Choose two.)

  A. This web request was inspected using the root web filter profile.

  B. FortiGate found the requested URL in its local cache.

  C. The requested URL belongs to category ID 52.

  D. The web request was allowed by FortiGate.

  Correct Answer: BC

• Question 34:

  Which configuration can be used to reduce the number of BGP sessions in an IBGP network?

  A. Neighbor range

  B. Route reflector

  C. Next-hop-self

  D. Neighbor group

  Correct Answer: B

• Question 35:

  An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage. However, after the changes, one network application started to have problems. During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before the arrival of the SYN/ACKs. When the SYN/ACK packets arrive to the FortiGate, the unit has already deleted the respective sessions. Which TCP session timer must be increased to fix this problem?

  A. TCP half open.

  B. TCP half close.

  C. TCP time wait.

  D. TCP session time to live.

  Correct Answer: A

• Question 36:

  What events are recorded in the crashlogs of a FortiGate device? (Choose two.)

  A. A process crash.

  B. Configuration changes.

  C. Changes in the status of any of the FortiGuard licenses.

  D. System entering to and leaving from the proxy conserve mode.

  Correct Answer: AD

• Question 37:

  An LDAP user cannot authenticate against a FortiGate device. Examine the real time debug output shown in the exhibit when the user attempted the authentication; then answer the question below.

  

  Based on the output in the exhibit, what can cause this authentication problem?

  A. User student is not found in the LDAP server.

  B. User student is using a wrong password.

  C. The FortiGate has been configured with the wrong password for the LDAP administrator.

  D. The FortiGate has been configured with the wrong authentication schema.

  Correct Answer: A

• Question 38:

  Which statements about bulk configuration changes using FortiManager CLI scripts are correct? (Choose two.)

  A. When executed on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate.

  B. When executed on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate.

  C. When executed on the All FortiGate in ADOM, changes are automatically installed without creating a new revision history.

  D. When executed on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.

  Correct Answer: AD

• Question 39:

  View the exhibit, which contains a partial output of an IKE real-time debug, and then answer the question below.

  

  Based on the debug output, which phase-1 setting is enabled in the configuration of this VPN?

  A. auto-discovery-sender

  B. auto-discovery-forwarder

  C. auto-discovery-shortcut

  D. auto-discovery-receiver

  Correct Answer: C

• Question 40:

  View the exhibit, which contains the output of get sys ha status, and then answer the question below.

  

  Which statements are correct regarding the output? (Choose two.)

  A. The slave configuration is not synchronized with the master.

  B. The HA management IP is 169.254.0.2.

  C. Master is selected because it is the only device in the cluster.

  D. port 7 is used the HA heartbeat on all devices in the cluster.

  Correct Answer: AC