Fortinet Fortinet Certifications NSE7_EFW-6.4 Questions & Answers

• Question 121:

  A FortiGate has two default routes:

  

  All Internet traffic is currently using port1. The exhibit shows partial information for one sample session of Internet traffic from an internal user:

  

  What would happen with the traffic matching the above session if the priority on the first default route (IDd1) were changed from 5 to 20?

  A. The session would be deleted, and the client would need to start a new session.

  B. The session would remain in the session table, and its traffic would start to egress from port2.

  C. The session would remain in the session table, but its traffic would now egress from both port1 and port2.

  D. The session would remain in the session table, and its traffic would still egress from port1.

  Correct Answer: D

• Question 122:

  Refer to the exhibit, which contains partial output from an IKE real-time debug.

  

  Which two statements about this debug output are correct? (Choose two.)

  A. The remote gateway IP address is 10.0.0.1.

  B. The initiator provided remote as its IPsec peer ID.

  C. It shows a phase 1 negotiation.

  D. The negotiation is using AES128 encryption with CBC hash.

  Correct Answer: BC