Fortinet Fortinet Certifications NSE7 Questions & Answers

• Question 41:

  Which of the following tasks are automated using the Install Wizard on FortiManager? (Choose two.)

  A. Preview pending configuration changes for managed devices.

  B. Add devices to FortiManager.

  C. Import policy packages from managed devices.

  D. Install configuration changes to managed devices.

  E. Import interface mappings from managed devices.

  Correct Answer: BD

• Question 42:

  Which of the following statements is true regarding a FortiGate configured as an explicit web proxy?

  A. FortiGate limits the number of simultaneous sessions per explicit web proxy user. This limit CANNOT be modified by the administrator.

  B. FortiGate limits the total number of simultaneous explicit web proxy users.

  C. FortiGate limits the number of simultaneous sessions per explicit web proxy user The limit CAN be modified by the administrator

  D. FortiGate limits the number of workstations that authenticate using the same web proxy user credentials. This limit CANNOT be modified by the administrator.

  Correct Answer: C

• Question 43:

  View the exhibit, which contains the output of a debug command, and then answer the question below.

  

  What statement is correct about this FortiGate?

  A. It is currently in system conserve mode because of high CPU usage.

  B. It is currently in FD conserve mode.

  C. It is currently in kernel conserve mode because of high memory usage.

  D. It is currently in system conserve mode because of high memory usage.

  Correct Answer: D

• Question 44:

  In which of the following states is a given session categorized as ephemeral? (Choose two.)

  A. A TCP session waiting to complete the three-way handshake.

  B. A TCP session waiting for FIN ACK.

  C. A UDP session with packets sent and received.

  D. A UDP session with only one packet received.

  Correct Answer: BC

• Question 45:

  An administrator has configured a dial-up IPsec VPN with one phase 2, extended authentication (XAuth)

  and IKE mode configuration. The administrator has also enabled the IKE real time debug:

  diagnose debug application ike-1

  diagnose debug enable

  In which order is each step and phase displayed in the debug output each time a new dial- up user is

  connecting to the VPN?

  A. Phase1; IKE mode configuration; XAuth; phase 2.

  B. Phase1; XAuth; IKE mode configuration; phase2.

  C. Phase1; XAuth; phase 2; IKE mode configuration.

  D. Phase1; IKE mode configuration; phase 2; XAuth.

  Correct Answer: D

• Question 46:

  View the exhibit, which contains the output of a diagnose command, and then answer the question below.

  

  Which statements are true regarding the output in the exhibit? (Choose two.)

  A. FortiGate will probe 121.111.236.179 every fifteen minutes for a response.

  B. Servers with the D flag are considered to be down.

  C. Servers with a negative TZ value are experiencing a service outage.

  D. FortiGate used 209.222.147.3 as the initial server to validate its contract.

  Correct Answer: CD

• Question 47:

  Examine the partial output from the IKE real time debug shown in the exhibit; then answer the question below.

  

  Why didn't the tunnel come up?

  A. IKE mode configuration is not enabled in the remote IPsec gateway.

  B. The remote gateway's Phase-2 configuration does not match the local gateway's phase- 2 configuration.

  C. The remote gateway's Phase-1 configuration does not match the local gateway's phase- 1 configuration.

  D. One IPsec gateway is using main mode, while the other IPsec gateway is using aggressive mode.

  Correct Answer: B

• Question 48:

  A FortiGate's portl is connected to a private network. Its port2 is connected to the Internet. Explicit web proxy is enabled in port1 and only explicit web proxy users can access the Internet. Web cache is NOT enabled. An internal web proxy user is downloading a file from the Internet via HTTP. Which statements are true regarding the two entries in the FortiGate session table related with this traffic? (Choose two.)

  A. Both session have the local flag on.

  B. The destination IP addresses of both sessions are IP addresses assigned to FortiGate's interfaces.

  C. One session has the proxy flag on, the other one does not.

  D. One of the sessions has the IP address of port2 as the source IP address.

  Correct Answer: AD

• Question 49:

  View the exhibit, which contains the partial output of a diagnose command, and then answer the question below.

  

  Based on the output, which of the following statements is correct?

  A. Anti-reply is enabled.

  B. DPD is disabled.

  C. Quick mode selectors are disabled.

  D. Remote gateway IP is 10.200.5.1.

  Correct Answer: A

• Question 50:

  What does the dirty flag mean in a FortiGate session?

  A. Traffic has been blocked by the antivirus inspection.

  B. The next packet must be re-evaluated against the firewall policies.

  C. The session must be removed from the former primary unit after an HA failover.

  D. Traffic has been identified as from an application that is not allowed.

  Correct Answer: B