Fortinet Fortinet Certifications NSE7_EFW-6.4 Questions & Answers

• Question 91:

  View the exhibit, which contains the output of a debug command, and then answer the question below.

  

  Which one of the following statements about this FortiGate is correct?

  A. It is currently in system conserve mode because of high CPU usage.

  B. It is currently in extreme conserve mode because of high memory usage.

  C. It is currently in proxy conserve mode because of high memory usage.

  D. It is currently in memory conserve mode because of high memory usage.

  Correct Answer: D

• Question 92:

  Which two statements about the Security Fabric are true? (Choose two.)

  A. Only the root FortiGate collects network information and forwards it to FortiAnalyzer.

  B. FortiGate uses FortiTelemetry protocol to communicate with FortiAnalyzer.

  C. All FortiGate devices in the Security Fabric must have bidirectional FortiTelemetry connectivity.

  D. Branch FortiGate devices must be configured first.

  Correct Answer: BC

  Reference: https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/327890/deploying- security-fabric

• Question 93:

  Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.)

  A. IPS failopen

  B. mem failopen

  C. AV failopen

  D. UTM failopen

  Correct Answer: AC

• Question 94:

  An administrator has configured the following CLI script on FortiManager, which failed to apply any changes to the managed device after being executed.

  

  Why didn't the script make any changes to the managed device?

  A. Commands that start with the # sign are not executed.

  B. CLI scripts will add objects only if they are referenced by policies.

  C. Incomplete commands are ignored in CLI scripts.

  D. Static routes can only be added using TCL scripts.

  Correct Answer: A

  https://help.fortinet.com/fmgr/50hlp/56/5-6-2/FortiManager_Admin_Guide/1000_Device% 20Manager/2400_Scripts/1000_Script%20sa mples/0200_CLI%20scripts+.htm#Error_Messages A sequence of FortiGate CLI commands, as you would type them at the command line. A comment line starts with the number sign (#). A comment line will not be executed.

• Question 95:

  View these partial outputs from two routing debug commands:

  

  Which outbound interface will FortiGate use to route web traffic from internal users to the Internet?

  A. Both port1 and port2

  B. port3

  C. port1

  D. port2

  Correct Answer: C

• Question 96:

  View the global IPS configuration, and then answer the question below.

  

  Which of the following statements is true regarding this configuration?

  A. IPS will scan every byte in every session.

  B. FortiGate will spawn IPS engine instances based on the system load.

  C. New packets will be passed through without inspection if the IPS socket buffer runs out of memory.

  D. IPS will use the faster matching algorithm which is only available for units with more than 4 GB memory.

  Correct Answer: A

• Question 97:

  Refer to the exhibit, which contains partial output from an IKE real-time debug.

  

  Based on the debug output, which phase 1 setting is enabled in the configuration of this VPN?

  A. auto-discovery-shortcut

  B. auto-discovery-forwarder

  C. auto-discovery-sender

  D. auto-discovery-receiver

  Correct Answer: D

  Reference: https://docs.fortinet.com/document/fortigate/6.0.0/handbook/320160/example- advpnconfiguration

  First the Spoke receives SHORTCUT_OFFER, it respondes with sending shortcut-query. AT the end it receives SHORTCUT_REPLY and creates new dynamic tunnel (H2S_0_0).

• Question 98:

  Examine the following partial output from a sniffer command; then answer the question below.

  

  What is the meaning of the packets dropped counter at the end of the sniffer?

  A. Number of packets that didn't match the sniffer filter.

  B. Number of total packets dropped by the FortiGate.

  C. Number of packets that matched the sniffer filter and were dropped by the FortiGate.

  D. Number of packets that matched the sniffer filter but could not be captured by the sniffer.

  Correct Answer: D

  https://kb.fortinet.com/kb/documentLink.do?externalID=11655

• Question 99:

  In which two states is a given session categorized as ephemeral? (Choose two.)

  A. A TCP session waiting to complete the three-way handshake.

  B. A TCP session waiting for FIN ACK.

  C. A UDP session with packets sent and received.

  D. A UDP session with only one packet received.

  Correct Answer: AD

• Question 100:

  Four FortiGate devices configured for OSPF connected to the same broadcast domain. The first unit is elected as the designated router The second unit is elected as the backup designated router Under normal operation, how many OSPF full adjacencies are formed to each of the other two units?

  B. 2

  C. 3

  D. 4

  Correct Answer: B