Fortinet NSE7_EFW-6.2 Online Practice Questions and Exam Preparation

Fortinet NSE7_EFW-6.2 Online Questions & Answers

• Question 61:

  Which the following events can trigger the election of a new primary unit in a HA cluster? (Choose two.)

  A. Primary unit stops sending HA heartbeat keepalives.
  B. The FortiGuard license for the primary unit is updated.
  C. One of the monitored interfaces in the primary unit is disconnected.
  D. A secondary unit is removed from the HA cluster.
  A. Primary unit stops sending HA heartbeat keepalives.
  C. One of the monitored interfaces in the primary unit is disconnected.

• Question 62:

  An administrator cannot connect to the GIU of a FortiGate unit with the IP address 10.0.1.254. The administrator runs the debug flow while attempting the connection using HTTP. The output of the debug flow is shown in the exhibit:

  

  Based on the error displayed by the debug flow, which are valid reasons for this problem? (Choose two.)

  A. HTTP administrative access is disabled in the FortiGate interface with the IP address 10.0.1.254.
  B. Redirection of HTTP to HTTPS administrative access is disabled.
  C. HTTP administrative access is configured with a port number different than 80.
  D. The packet is denied because of reverse path forwarding check.
  A. HTTP administrative access is disabled in the FortiGate interface with the IP address 10.0.1.254.
  C. HTTP administrative access is configured with a port number different than 80.

• Question 63:

  Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.)

  A. IPS failopen
  B. mem failopen
  C. AV failopen
  D. UTM failopen
  A. IPS failopen
  C. AV failopen

• Question 64:

  What does the dirty flag mean in a FortiGate session?

  A. Traffic has been blocked by the antivirus inspection.
  B. The next packet must be re-evaluated against the firewall policies.
  C. The session must be removed from the former primary unit after an HA failover.
  D. Traffic has been identified as from an application that is not allowed.
  B. The next packet must be re-evaluated against the firewall policies.

  ---

  https://kb.fortinet.com/kb/viewContent.do?externalId=FD40119andsliceId=1

• Question 65:

  View the exhibit, which contains a partial routing table, and then answer the question below.

  

  Assuming all the appropriate firewall policies are configured, which of the following pings will FortiGate route? (Choose two.)

  A. Source IP address 10.1.0.24, Destination IP address 10.72.3.20.
  B. Source IP address 10.72.3.27, Destination IP address 10.1.0.52.
  C. Source IP address 10.72.3.52, Destination IP address 10.1.0.254.
  D. Source IP address 10.73.9.10, Destination IP address 10.72.3.15.
  B. Source IP address 10.72.3.27, Destination IP address 10.1.0.52.
  C. Source IP address 10.72.3.52, Destination IP address 10.1.0.254.

• Question 66:

  View the exhibit, which contains the output of a debug command, and then answer the question below.

  

  Which one of the following statements about this FortiGate is correct?

  A. It is currently in system conserve mode because of high CPU usage.
  B. It is currently in extreme conserve mode because of high memory usage.
  C. It is currently in proxy conserve mode because of high memory usage.
  D. It is currently in memory conserve mode because of high memory usage.
  D. It is currently in memory conserve mode because of high memory usage.

• Question 67:

  An LDAP user cannot authenticate against a FortiGate device. Examine the real time debug output shown in the exhibit when the user attempted the authentication; then answer the question below.

  

  Based on the output in the exhibit, what can cause this authentication problem?

  A. User student is not found in the LDAP server.
  B. User student is using a wrong password.
  C. The FortiGate has been configured with the wrong password for the LDAP administrator.
  D. The FortiGate has been configured with the wrong authentication schema.
  A. User student is not found in the LDAP server.

• Question 68:

  View the exhibit, which contains an entry in the session table, and then answer the question below.

  

  Which one of the following statements is true regarding FortiGate's inspection of this session?

  A. FortiGate applied proxy-based inspection.
  B. FortiGate forwarded this session without any inspection.
  C. FortiGate applied flow-based inspection.
  D. FortiGate applied explicit proxy-based inspection.
  A. FortiGate applied proxy-based inspection.

  ---

  https://kb.fortinet.com/kb/viewContent.do?externalId=FD30042

• Question 69:

  Examine the IPsec configuration shown in the exhibit; then answer the question below. Questions and Answers PDF P-3

  

  An administrator wants to monitor the VPN by enabling the IKE real time debug using these commands: diagnose vpn ike log-filter src-addr4 10.0.10.1 diagnose debug application ike -1 diagnose debug enable The VPN is currently up, there is no traffic crossing the tunnel and DPD packets are being interchanged between both IPsec gateways. However, the IKE real time debug does NOT show any output.

  Why isn't there any output?

  A. The IKE real time shows the phases 1 and 2 negotiations only. It does not show any more output once the tunnel is up.
  B. The log-filter setting is set incorrectly. The VPN's traffic does not match this filter.
  C. The IKE real time debug shows the phase 1 negotiation only. For information after that, the administrator must use the IPsec real time debug instead: diagnose debug application ipsec -1.
  D. The IKE real time debug shows error messages only. If it does not provide any output, it indicates that the tunnel is operating normally.
  B. The log-filter setting is set incorrectly. The VPN's traffic does not match this filter.

• Question 70:

  Refer to the exhibit, which contains the partial output of a diagnose command.

  

  Based on the output, which two statements are correct? (Choose two.)

  A. Anti-replay is enabled.
  B. DPD is disabled.
  C. Remote gateway IP is 10.200.4.1.
  D. Quick mode selectors are disabled.
  A. Anti-replay is enabled.
  C. Remote gateway IP is 10.200.4.1.