Fortinet Fortinet Certifications NSE7 Questions & Answers

• Question 81:

  View the exhibit, which contains the output of a diagnose command, and then answer the question below.

  

  What statements are correct regarding the output? (Choose two.)

  A. This is an expected session created by a session helper.

  B. Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next-hop IP address 10.0.1.10.

  C. Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next-hop IP address 10.200.1.1.

  D. This is an expected session created by an application control profile.

  Correct Answer: AC

• Question 82:

  View the exhibit, which contains the output of a web diagnose command, and then answer the question below.

  

  Which one of the following statements explains why the cache statistics are all zeros?

  A. The administrator has reallocated the cache memory to a separate process.

  B. There are no users making web requests.

  C. The FortiGuard web filter cache is disabled in the FortiGate's configuration.

  D. FortiGate is using a flow-based web filter and the cache applies only to proxy-based inspection.

  Correct Answer: D

• Question 83:

  Four FortiGate devices configured for OSPF connected to the same broadcast domain. The first unit is elected as the designated router The second unit is elected as the backup designated router Under normal operation, how many OSPF full adjacencies are formed to each of the other two units?

  A. 1

  B. 2

  C. 3

  D. 4

  Correct Answer: B

• Question 84:

  Examine the following partial outputs from two routing debug commands; then answer the question below.

  # get router info kernel

  tab=254 vf=0 scope=0type=1 proto=11 prio=0 0.0.0.0/0.0.0.0/0->0.0.0.0/0 pref=0.0.0.0

  gwy=10.200.1.254 dev=2(port1)

  tab=254 vf=0 scope=0type=1 proto=11 prio=10 0.0.0.0/0.0.0.0/0->0.0.0.0/0 pref=0.0.0.0

  gwy=10.200.2.254 dev=3(port2)

  tab=254 vf=0 scope=253type=1 proto=2 prio=0 0.0.0.0/0.0.0.0/.->10.0.1.0/24 pref=10.0.1.254

  gwy=0.0.0.0 dev=4(port3)

  # get router info routing-table all s*0.0.0.0/0 [10/0] via 10.200.1.254, portl [10/0] via 10.200.2.254, port2,

  [10/0] dO.0.1.0/24 is directly connected, port3 dO.200.1.0/24 is directly connected, portl d0.200.2.0/24 is

  directly connected, port2 Which outbound interface or interfaces will be used by this FortiGate to route web traffic from internal users to the Internet?

  A. port!

  B. port2.

  C. Both portl and port2.

  D. port3.

  Correct Answer: B

• Question 85:

  View the exhibit, which contains an entry in the session table, and then answer the question below.

  

  Which one of the following statements is true regarding FortiGate's inspection of this session?

  A. FortiGate applied proxy-based inspection.

  B. FortiGate forwarded this session without any inspection.

  C. FortiGate applied flow-based inspection.

  D. FortiGate applied explicit proxy-based inspection.

  Correct Answer: B

• Question 86:

  An administrator has configured the following CLI script on FortiManager, which failed to apply any

  changes to the managed device after being executed.

  

  Why didn't the script make any changes to the managed device?

  A. Commands that start with the # sign are not executed.

  B. CLI scripts will add objects only if they are referenced by policies.

  C. Incomplete commands are ignored in CLI scripts.

  D. Static routes can only be added using TCL scripts.

  Correct Answer: B

• Question 87:

  Examine the partial output from two web filter debug commands; then answer the question below:

  

  Based on the above outputs, which is the FortiGuard web filter category for the web site www.fgt99.com?

  A. Finance and banking

  B. General organization.

  C. Business.

  D. Information technology.

  Correct Answer: C

• Question 88:

  View the exhibit, which contains the output of a BGP debug command, and then answer the question below.

  

  Which of the following statements about the exhibit are true? (Choose two.)

  A. For the peer 10.125.0.60, the BGP state of is Established.

  B. The local BGP peer has received a total of three BGP prefixes.

  C. Since the BGP counters were last reset, the BGP peer 10.200.3.1 has never been down.

  D. The local BGP peer has not established a TCP session to the BGP peer 10.200.3.1.

  Correct Answer: BC