Fortinet NSE7_EFW-6.4 Online Practice Questions and Exam Preparation

Fortinet NSE7_EFW-6.4 Online Questions & Answers

• Question 21:

  The CLI command set intelligent-mode controls the IPS engine's adaptive scanning behavior. Which of the following statements describes IPS adaptive scanning?

  A. Determines the optimal number of IPS engines required based on system load.
  B. Downloads signatures on demand from FDS based on scanning requirements.
  C. Determines when it is secure enough to stop scanning session traffic.
  D. Choose a matching algorithm based on available memory and the type of inspection being performed.
  C. Determines when it is secure enough to stop scanning session traffic.

• Question 22:

  What global configuration setting changes the behavior for content-inspected traffic while FortiGate is in system conserve mode?

  A. av-failopen
  B. mem-failopen
  C. utm-failopen
  D. ips-failopen
  A. av-failopen

• Question 23:

  Examine the following partial outputs from two routing debug commands; then answer the question below:

  

  Why the default route using port2 is not displayed in the output of the second command?

  A. It has a lower priority than the default route using port1.
  B. It has a higher priority than the default route using port1.
  C. It has a higher distance than the default route using port1.
  D. It is disabled in the FortiGate configuration.
  C. It has a higher distance than the default route using port1.

• Question 24:

  View the exhibit, which contains a partial routing table, and then answer the question below.

  

  Assuming all the appropriate firewall policies are configured, which of the following pings will FortiGate route? (Choose two.)

  A. Source IP address 10.1.0.24, Destination IP address 10.72.3.20.
  B. Source IP address 10.72.3.27, Destination IP address 10.1.0.52.
  C. Source IP address 10.72.3.52, Destination IP address 10.1.0.254.
  D. Source IP address 10.73.9.10, Destination IP address 10.72.3.15.
  B. Source IP address 10.72.3.27, Destination IP address 10.1.0.52.
  C. Source IP address 10.72.3.52, Destination IP address 10.1.0.254.

• Question 25:

  View the exhibit, which contains the output of a BGP debug command, and then answer the question below.

  

  Which of the following statements about the exhibit are true? (Choose two.)

  A. The local router's BGP state is Established with the 10.125.0.60 peer.
  B. Since the counters were last reset; the 10.200.3.1 peer has never been down.
  C. The local router has received a total of three BGP prefixes from all peers.
  D. The local router has not established a TCP session with 100.64.3.1.
  A. The local router's BGP state is Established with the 10.125.0.60 peer.
  D. The local router has not established a TCP session with 100.64.3.1.

• Question 26:

  Refer to the exhibit, which shows the output of a debug command.

  

  Which two statements about the output are true? (Choose two.)

  A. The local FortiGate OSPF router ID is 0.0.0.4.
  B. Port4 is connected to the OSPF backbone area.
  C. In the network connected to port4, two OSPF routers are down.
  D. The local FortiGate is the backup designated router.
  A. The local FortiGate OSPF router ID is 0.0.0.4.
  B. Port4 is connected to the OSPF backbone area.

• Question 27:

  Which two statements about an auxiliary session are true? (Choose two.)

  A. With the auxiliary session setting enabled, ECMP traffic is accelerated to the NP6 processor.
  B. With the auxiliary session setting enabled, two sessions will be created in case of routing change.
  C. With the auxiliary session setting disabled, for each traffic path, FortiGate will use the same auxiliary session.
  D. With the auxiliary session disabled, only auxiliary sessions will be offloaded.
  C. With the auxiliary session setting disabled, for each traffic path, FortiGate will use the same auxiliary session.
  D. With the auxiliary session disabled, only auxiliary sessions will be offloaded.

• Question 28:

  Which real time debug should an administrator enable to troubleshoot RADIUS authentication problems?

  A. Diagnose debug application radius -1.
  B. Diagnose debug application fnbamd -1.
  C. Diagnose authd console 璴og enable.
  D. Diagnose radius console 璴og enable.
  B. Diagnose debug application fnbamd -1.

• Question 29:

  An administrator has configured the following CLI script on FortiManager, which failed to apply any changes to the managed device after being executed.

  

  Why didn't the script make any changes to the managed device?

  A. Commands that start with the # sign are not executed.
  B. CLI scripts will add objects only if they are referenced by policies.
  C. Incomplete commands are ignored in CLI scripts.
  D. Static routes can only be added using TCL scripts.
  A. Commands that start with the # sign are not executed.

• Question 30:

  Which statement about memory conserve mode is true?

  A. A FortiGate exits conserve mode when the configured memory use threshold reaches yellow.
  B. A FortiGate starts dropping all the new and old sessions when the configured memory use threshold reaches extreme.
  C. A FortiGate starts dropping new sessions when the configured memory use threshold reaches red
  D. A FortiGate enters conserve mode when the configured memory use threshold reaches red
  D. A FortiGate enters conserve mode when the configured memory use threshold reaches red