Fortinet NSE7_EFW-6.2 Online Practice Questions and Exam Preparation

Fortinet NSE7_EFW-6.2 Online Questions & Answers

• Question 1:

  

  Refer to the exhibit, which contains the output of get system ha status. Which two statements about the output are true? (Choose two.)

  A. The slave configuration is synchronized with the master.
  B. port7 is used as the HA heartbeat on all devices in the cluster.
  C. Master is selected based on the priority configured under config system ha.
  D. The HA management IP is 169.254.0.2.
  B. port7 is used as the HA heartbeat on all devices in the cluster.
  C. Master is selected based on the priority configured under config system ha.

• Question 2:

  Refer to the exhibit, which contains a TCL script configuration on FortiManager.

  

  An administrator has configured the TCL script on FortiManager, but failed to apply any changes to the managed device after being executed. Why did the TCL script fail to make any changes to the managed device?

  A. Changes in an interface configuration can only be done by CLI script.
  B. The TCL script must start with #include .
  C. Incomplete commands are ignored in TCL scripts.
  D. The TCL command run_cmd has not been created.
  D. The TCL command run_cmd has not been created.

• Question 3:

  When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filter web requests when the client browser does not provide the server name indication (SNI) extension?

  A. FortiGate uses the requested URL from the user's web browser.
  B. FortiGate uses the CN information from the Subject field in the server certificate.
  C. FortiGate blocks the request without any further inspection.
  D. FortiGate switches to the full SSL inspection method to decrypt the data.
  B. FortiGate uses the CN information from the Subject field in the server certificate.

• Question 4:

  Which two conditions must be met for a statistic route to be active in the routing table? (Choose two.)

  A. The link health monitor (if configured) is up.
  B. There is no other route, to the same destination, with a higher distance.
  C. The outgoing interface is up.
  D. The next-hop IP address is up.
  A. The link health monitor (if configured) is up.
  C. The outgoing interface is up.

• Question 5:

  Refer to the exhibit, which contains the output of a BGP debug command.

  

  Which statement about the exhibit is true?

  A. The local router has received a total of three BGP prefixes from all peers.
  B. The local router has not established a TCP session with 100.64.3.1.
  C. Since the counters were last reset, the 10.200.3.1 peer has never been down.
  D. The local router BGP state is OpenConfirm with the 10.127.0.75 peer.
  B. The local router has not established a TCP session with 100.64.3.1.

• Question 6:

  Refer to the exhibit, which contains the output of diagnose sys session list.

  

  If the HA ID for the primary unit is zero (0), which statement about the output is true?

  A. This session cannot be synced with the slave unit.
  B. The inspection of this session has been offloaded to the slave unit.
  C. The master unit is processing this traffic.
  D. This session is for HA heartbeat traffic.
  C. The master unit is processing this traffic.

• Question 7:

  What is the diagnose test application ipsmonitor 99 command used for?

  A. To enable IPS bypass mode
  B. To provide information regarding IPS sessions
  C. To disable the IPS engine
  D. To restart all IPS engines and monitors
  D. To restart all IPS engines and monitors

• Question 8:

  Refer to the exhibit, which contains the partial output of a diagnose command.

  

  Based on the output, which two statements are correct? (Choose two.)

  A. Anti-replay is enabled.
  B. DPD is disabled.
  C. Remote gateway IP is 10.200.4.1.
  D. Quick mode selectors are disabled.
  A. Anti-replay is enabled.
  C. Remote gateway IP is 10.200.4.1.

• Question 9:

  Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.)

  A. IPS failopen
  B. mem failopen
  C. AV failopen
  D. UTM failopen
  A. IPS failopen
  C. AV failopen

• Question 10:

  View the exhibit, which contains the output of a BGP debug command, and then answer the question below.

  

  Which of the following statements about the exhibit are true? (Choose two.)

  A. The local router's BGP state is Established with the 10.125.0.60 peer.
  B. Since the counters were last reset; the 10.200.3.1 peer has never been down.
  C. The local router has received a total of three BGP prefixes from all peers.
  D. The local router has not established a TCP session with 100.64.3.1.
  A. The local router's BGP state is Established with the 10.125.0.60 peer.
  D. The local router has not established a TCP session with 100.64.3.1.