Fortinet Fortinet Certifications NSE7_EFW-6.0 Questions & Answers

• Question 11:

  View the exhibit, which contains a partial routing table, and then answer the question below.

  

  Assuming all the appropriate firewall policies are configured, which of the following pings will FortiGate route? (Choose two.)

  A. Source IP address 10.1.0.24, Destination IP address 10.72.3.20.

  B. Source IP address 10.72.3.27, Destination IP address 10.1.0.52.

  C. Source IP address 10.72.3.52, Destination IP address 10.1.0.254.

  D. Source IP address 10.73.9.10, Destination IP address 10.72.3.15.

  Correct Answer: BC

• Question 12:

  View the exhibit, which contains the partial output of a diagnose command, and then answer the question below.

  

  Based on the output, which one of the following statements is correct?

  A. Quick mode selectors are disabled.

  B. DPD is disabled.

  C. Anti-replay is enabled.

  D. Remote gateway IP is 10.200.5.1

  Correct Answer: C

• Question 13:

  Which of the following conditions must be met for a static route to be active in the routing table? (Choose two.)

  A. The next-hop IP address is up.

  B. There is no other route, to the same destination, with a higher distance.

  C. The link health monitor (if configured) is up.

  D. The outgoing interface is up.

  Correct Answer: CD

• Question 14:

  View the exhibit, which contains the output of a debug command, and then answer the question below.

  

  Which of the following statements about the exhibit are true? (Choose two.)

  A. Port4 is connected to the OSPF backbone area.

  B. In the network connected to port4, two OSPF routers are down.

  C. The local FortiGate is the backup designated router.

  D. The local FortiGate's OSPF router ID is 0.0.0.4.

  Correct Answer: AD

• Question 15:

  How does FortiManager handle FortiGuard requests from FortiGate devices, when it is configured as a local FDS?

  A. FortiManager will respond to update requests only from a managed device.

  B. FortiManager can download and maintain local copies of FortiGuard databases.

  C. FortiManager supports only FortiGuard push update to managed devices.

  D. FortiManager does not support web filter rating requests.

  Correct Answer: B

• Question 16:

  When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filler web requests when the client browser does not provide the server name indication (SNI) extension ?

  A. FortiGate switches to the full SSL inspection method to decrypt the data.

  B. FortiGate blocks the request without any further inspection.

  C. FortiGate uses the Issued T: field in the server's certificate.

  D. FortiGate uses the requested URL from the user's web browser.

  Correct Answer: C

• Question 17:

  View the exhibit, which contains the output of a real-time debug, and then answer the question below.

  

  Which of the following statements are true regarding this output (Choose two.)

  A. This web request was inspected using the root web filter profile.

  B. The requested URL belongs to category ID 52.

  C. The web request was blocked by FortiGate.

  D. FortiGate found the requested URL in its local cache.

  Correct Answer: AC

• Question 18:

  View the exhibit, which contains the output of diagnose sys session stat, and then answer the question below.

  

  Which of the following statements about the output shown are correct? (Choose two.)

  A. There are 166 TCP sessions waiting to complete the three-way handshake.

  B. All the sessions in the session table are TCP sessions.

  C. There are 0 ephemeral sessions.

  D. No sessions have been deleted because of memory pages exhaustion.

  Correct Answer: CD

• Question 19:

  Which of the following tasks are automated using the Install Wizard on FortiManager? (Choose two.)

  A. Install configuration changes to managed devices.

  B. Preview pending configuration changes for managed devices.

  C. Import policy packages from managed devices.

  D. Add devices to FortiManager.

  E. Import interface mappings from managed devices

  Correct Answer: AB

• Question 20:

  View the exhibit, which contains a session table entry, and then answer the question below.

  

  Which one of the following statements is true regarding FortiGates's inspection of this session?

  A. FortiGate applied flow-based inspection.

  B. FortiGate applied proxy-based inspection.

  C. FortiGate forwarded this session without any inspection.

  D. FortiGate applied NGFW flow-based inspection.

  Correct Answer: B