Fortinet Fortinet Certifications NSE7_EFW-6.2 Questions & Answers

• Question 1:

  Refer to the exhibit, which contains a TCL script configuration on FortiManager.

  

  An administrator has configured the TCL script on FortiManager, but failed to apply any changes to the

  managed device after being executed.

  Why did the TCL script fail to make any changes to the managed device?

  A. Changes in an interface configuration can only be done by CLI script.

  B. The TCL script must start with #include <>.

  C. Incomplete commands are ignored in TCL scripts.

  D. The TCL command run_cmd has not been created.

  Correct Answer: D

• Question 2:

  

  Refer to the exhibit, which contains the output of get system ha status. Which two statements about the output are true? (Choose two.)

  A. The slave configuration is synchronized with the master.

  B. port7 is used as the HA heartbeat on all devices in the cluster.

  C. Master is selected based on the priority configured under config system ha.

  D. The HA management IP is 169.254.0.2.

  Correct Answer: BC

• Question 3:

  Which two conditions must be met for a statistic route to be active in the routing table? (Choose two.)

  A. The link health monitor (if configured) is up.

  B. There is no other route, to the same destination, with a higher distance.

  C. The outgoing interface is up.

  D. The next-hop IP address is up.

  Correct Answer: AC

• Question 4:

  When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filter web requests when the client browser does not provide the server name indication (SNI) extension?

  A. FortiGate uses the requested URL from the user's web browser.

  B. FortiGate uses the CN information from the Subject field in the server certificate.

  C. FortiGate blocks the request without any further inspection.

  D. FortiGate switches to the full SSL inspection method to decrypt the data.

  Correct Answer: B

• Question 5:

  Refer to the exhibit, which contains the output of a BGP debug command.

  

  Which statement about the exhibit is true?

  A. The local router has received a total of three BGP prefixes from all peers.

  B. The local router has not established a TCP session with 100.64.3.1.

  C. Since the counters were last reset, the 10.200.3.1 peer has never been down.

  D. The local router BGP state is OpenConfirm with the 10.127.0.75 peer.

  Correct Answer: B

• Question 6:

  Refer to the exhibit, which contains the output of diagnose sys session list.

  

  If the HA ID for the primary unit is zero (0), which statement about the output is true?

  A. This session cannot be synced with the slave unit.

  B. The inspection of this session has been offloaded to the slave unit.

  C. The master unit is processing this traffic.

  D. This session is for HA heartbeat traffic.

  Correct Answer: C

• Question 7:

  View the exhibit, which contains the output of a debug command, and then answer the question below.

  

  Which one of the following statements about this FortiGate is correct?

  A. It is currently in system conserve mode because of high CPU usage.

  B. It is currently in extreme conserve mode because of high memory usage.

  C. It is currently in proxy conserve mode because of high memory usage.

  D. It is currently in memory conserve mode because of high memory usage.

  Correct Answer: D

• Question 8:

  View the exhibit, which contains the output of a BGP debug command, and then answer the question below.

  

  Which of the following statements about the exhibit are true? (Choose two.)

  A. The local router's BGP state is Established with the 10.125.0.60 peer.

  B. Since the counters were last reset; the 10.200.3.1 peer has never been down.

  C. The local router has received a total of three BGP prefixes from all peers.

  D. The local router has not established a TCP session with 100.64.3.1.

  Correct Answer: AD

• Question 9:

  Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.)

  A. IPS failopen

  B. mem failopen

  C. AV failopen

  D. UTM failopen

  Correct Answer: AC

• Question 10:

  Refer to the exhibit, which contains the partial output of a diagnose command.

  

  Based on the output, which two statements are correct? (Choose two.)

  A. Anti-replay is enabled.

  B. DPD is disabled.

  C. Remote gateway IP is 10.200.4.1.

  D. Quick mode selectors are disabled.

  Correct Answer: AC