Fortinet NSE7_EFW-6.4 Online Practice Questions and Exam Preparation

Fortinet NSE7_EFW-6.4 Online Questions & Answers

• Question 121:

  View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.

  

  The administrator does not have access to the remote gateway. Based on the debug output, what configuration changes can the administrator make to the local gateway to resolve the phase 1 negotiation error?

  A. Change phase 1 encryption to 3DES and authentication to SHA128.
  B. Change phase 1 encryption to AES128 and authentication to SHA512.
  C. Change phase 1 encryption to AESCBC and authentication to SHA2.
  D. Change phase 1 encryption to AES256 and authentication to SHA256.
  D. Change phase 1 encryption to AES256 and authentication to SHA256.

• Question 122:

  Examine the following partial outputs from two routing debug commands; then answer the question below.

  # get router info kernel

  tab=254 vf=0 scope=0type=1 proto=11 prio=0 0.0.0.0/0.0.0.0/0->0.0.0.0/0 pref=0.0.0.0

  gwy=10.200.1.254 dev=2(port1)

  tab=254 vf=0 scope=0type=1 proto=11 prio=10 0.0.0.0/0.0.0.0/0->0.0.0.0/0 pref=0.0.0.0

  gwy=10.200.2.254 dev=3(port2)

  tab=254 vf=0 scope=253type=1 proto=2 prio=0 0.0.0.0/0.0.0.0/.->10.0.1.0/24 pref=10.0.1.254

  gwy=0.0.0.0 dev=4(port3)

  # get router info routing-table all s*0.0.0.0/0 [10/0] via 10.200.1.254, portl [10/0] via 10.200.2.254, port2, [10/0] dO.0.1.0/24 is directly connected, port3 dO.200.1.0/24 is directly connected, portl d0.200.2.0/24 is directly connected, port2

  Which outbound interface or interfaces will be used by this FortiGate to route web traffic from internal users to the Internet?

  A. port!
  B. port2.
  C. Both portl and port2.
  D. port3.
  B. port2.