Fortinet NSE7_EFW-6.4 Online Practice Questions and Exam Preparation

Fortinet NSE7_EFW-6.4 Online Questions & Answers

• Question 91:

  Refer to the exhibit, which contains the debug output of diagnose dvm device list.

  

  Which two statements about the output shown in the exhibit are correct? (Choose two.)

  A. ADOMs are disabled on the FortiManager
  B. The FortiGate configuration is in sync with latest running revision history.
  C. There are pending device-level changes yet to be installed on Local-FortiGate.
  D. The policy package has been modified for Local-FortiGate.
  B. The FortiGate configuration is in sync with latest running revision history.
  C. There are pending device-level changes yet to be installed on Local-FortiGate.

• Question 92:

  View the exhibit, which contains a session entry, and then answer the question below.

  

  Which statement is correct regarding this session?

  A. It is an ICMP session from 10.1.10.10 to 10.200.1.1.
  B. It is an ICMP session from 10.1.10.10 to 10.200.5.1.
  C. It is a TCP session in ESTABLISHED state from 10.1.10.10 to 10.200.5.1.
  D. It is a TCP session in CLOSE_WAIT state from 10.1.10.10 to 10.200.1.1.
  B. It is an ICMP session from 10.1.10.10 to 10.200.5.1.

• Question 93:

  View the exhibit, which contains the output of a web diagnose command, and then answer the question below.

  

  Which one of the following statements explains why the cache statistics are all zeros?

  A. The administrator has reallocated the cache memory to a separate process.
  B. There are no users making web requests.
  C. The FortiGuard web filter cache is disabled in the FortiGate's configuration.
  D. FortiGate is using a flow-based web filter and the cache applies only to proxy-based inspection.
  C. The FortiGuard web filter cache is disabled in the FortiGate's configuration.

• Question 94:

  Which two statements about the Security Fabric are true? (Choose two.)

  A. Only the root FortiGate collects network information and forwards it to FortiAnalyzer.
  B. FortiGate uses FortiTelemetry protocol to communicate with FortiAnalyzer.
  C. All FortiGate devices in the Security Fabric must have bidirectional FortiTelemetry connectivity.
  D. Branch FortiGate devices must be configured first.
  B. FortiGate uses FortiTelemetry protocol to communicate with FortiAnalyzer.
  C. All FortiGate devices in the Security Fabric must have bidirectional FortiTelemetry connectivity.

• Question 95:

  When using the SSL certificate inspection method for HTTPS traffic, how does FortiGate filter web requests when the browser client does not provide the server name indication (SNI) extension?

  A. FortiGate uses CN information from the Subject field in the server's certificate.
  B. FortiGate switches to the full SSL inspection method to decrypt the data.
  C. FortiGate blocks the request without any further inspection.
  D. FortiGate uses the requested URL from the user's web browser.
  A. FortiGate uses CN information from the Subject field in the server's certificate.

• Question 96:

  View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.

  

  Which statements about this debug output are correct? (Choose two.)

  A. The remote gateway IP address is 10.0.0.1.
  B. It shows a phase 1 negotiation.
  C. The negotiation is using AES128 encryption with CBC hash.
  D. The initiator has provided remote as its IPsec peer ID.
  B. It shows a phase 1 negotiation.
  D. The initiator has provided remote as its IPsec peer ID.

• Question 97:

  View the exhibit, which contains the output of diagnose sys session list, and then answer the question below.

  

  If the HA ID for the primary unit is zero (0), which statement is correct regarding the output?

  A. This session is for HA heartbeat traffic.
  B. This session is synced with the slave unit.
  C. The inspection of this session has been offloaded to the slave unit.
  D. This session cannot be synced with the slave unit.
  B. This session is synced with the slave unit.

• Question 98:

  Which statement about the designated router (DR) and backup designated router (BDR) in an OSPF multi-access network is true?

  A. FortiGate first checks the OSPF ID to elect a DR.
  B. Non-DR and non-BDR routers will form full adjacencies to DR and BDR only.
  C. BDR is responsible for forwarding link state information from one router to another.
  D. Only the DR receives link state information from non-DR routers.
  B. Non-DR and non-BDR routers will form full adjacencies to DR and BDR only.

• Question 99:

  Which of the following statements are correct regarding application layer test commands? (Choose two.)

  A. They are used to filter real-time debugs.
  B. They display real-time application debugs.
  C. Some of them display statistics and configuration information about a feature or process.
  D. Some of them can be used to restart an application.
  C. Some of them display statistics and configuration information about a feature or process.
  D. Some of them can be used to restart an application.

• Question 100:

  Examine the output of the `get router info ospf interface' command shown in the exhibit; then answer the question below.

  

  Which statements are true regarding the above output? (Choose two.)

  A. The port4 interface is connected to the OSPF backbone area.
  B. The local FortiGate has been elected as the OSPF backup designated router.
  C. There are at least 5 OSPF routers connected to the port4 network.
  D. Two OSPF routers are down in the port4 network.
  A. The port4 interface is connected to the OSPF backbone area.
  C. There are at least 5 OSPF routers connected to the port4 network.