Fortinet NSE7_EFW-6.4 Online Practice Questions and Exam Preparation

Fortinet NSE7_EFW-6.4 Online Questions & Answers

• Question 101:

  Refer to the exhibit, which contains a TCL script configuration on FortiManager.

  

  An administrator has configured the TCL script on FortiManager, but failed to apply any changes to the managed device after being executed. Why did the TCL script fail to make any changes to the managed device?

  A. Changes in an interface configuration can only be done by CLI script.
  B. The TCL script must start with #include .
  C. Incomplete commands are ignored in TCL scripts.
  D. The TCL command run_cmd has not been created.
  D. The TCL command run_cmd has not been created.

• Question 102:

  Examine the partial output from two web filter debug commands; then answer the question below: Based on the above outputs, which is the FortiGuard web filter category for the web site www.fgt99.com?

  

  A. Finance and banking
  B. General organization.
  C. Business.
  D. Information technology.
  C. Business.

• Question 103:

  Which two tasks are automated using the Install Wizard on FortiManager? (Choose two.)

  A. Preview pending configuration changes for managed devices.
  B. Add devices to FortiManager.
  C. Import policy packages from managed devices.
  D. Install configuration changes to managed devices.
  E. Import interface mappings from managed devices.
  A. Preview pending configuration changes for managed devices.
  D. Install configuration changes to managed devices.

• Question 104:

  Refer to the exhibit, which shows a partial routing table.

  

  Assuming all the appropriate firewall policies are configured, which two pings will FortiGate route? (Choose two.)

  A. Source IP address: 10.1.0.10. Destination IP address: 10.64.1.52
  B. Source IPaddress: 10.72.3.52. Destination IP address: 10.1.0.254
  C. Source IPaddress: 10.10.4.24, Destination IPaddress: 10.72.3.20
  D. Source IPaddress: 10.73.9.10, Destination IPaddress: 10.72.3.15
  A. Source IP address: 10.1.0.10. Destination IP address: 10.64.1.52
  B. Source IPaddress: 10.72.3.52. Destination IP address: 10.1.0.254

• Question 105:

  Which statement is true regarding File description (FD) conserve mode?

  A. IPS inspection is affected when FortiGate enters FD conserve mode.
  B. A FortiGate enters FD conserve mode when the amount of available description is less than 5%.
  C. FD conserve mode affects all daemons running on the device.
  D. Restarting the WAD process is required to leave FD conserve mode.
  B. A FortiGate enters FD conserve mode when the amount of available description is less than 5%.

• Question 106:

  Refer to the exhibit, which contains a TCL script configuration on FortiManager.

  An administrator has configured the TCL script on FortiManager, but the TCL script failed to apply any changes to the managed device after being run.

  

  Why did the TCL script fail to make any changes to the managed device?

  A. The TCL command run_cmd has not been created.
  B. The TCL script must start with tinclude .
  C. Incomplete commands are ignored in TCL scripts.
  D. Changes to an interface configuration can be made only by a CLI script.
  A. The TCL command run_cmd has not been created.

• Question 107:

  Which of the following statements are true regarding the SIP session helper and the SIP application layer gateway (ALG)? (Choose three.)

  A. SIP session helper runs in the kernel; SIP ALG runs as a user space process.
  B. SIP ALG supports SIP HA failover; SIP helper does not.
  C. SIP ALG supports SIP over IPv6; SIP helper does not.
  D. SIP ALG can create expected sessions for media traffic; SIP helper does not.
  E. SIP helper supports SIP over TCP and UDP; SIP ALG supports only SIP over UDP.
  B. SIP ALG supports SIP HA failover; SIP helper does not.
  C. SIP ALG supports SIP over IPv6; SIP helper does not.
  D. SIP ALG can create expected sessions for media traffic; SIP helper does not.

• Question 108:

  Which the following events can trigger the election of a new primary unit in a HA cluster? (Choose two.)

  A. Primary unit stops sending HA heartbeat keepalives.
  B. The FortiGuard license for the primary unit is updated.
  C. One of the monitored interfaces in the primary unit is disconnected.
  D. A secondary unit is removed from the HA cluster.
  A. Primary unit stops sending HA heartbeat keepalives.
  C. One of the monitored interfaces in the primary unit is disconnected.

• Question 109:

  Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.)

  A. IPS failopen
  B. mem failopen
  C. AV failopen
  D. UTM failopen
  A. IPS failopen
  C. AV failopen

• Question 110:

  Examine the following routing table and BGP configuration; then answer the question below.

  

  TheBGP connection is up, but the local peer is NOT advertising the prefix 192.168.1.0/24. Which configuration change will make the local peer advertise this prefix?

  A. Enable the redistribution of connected routers into BGP.
  B. Enable the redistribution of static routers into BGP.
  C. Disable the setting network-import-check.
  D. Enable the setting ebgp-multipath.
  C. Disable the setting network-import-check.