Fortinet NSE7_EFW-6.4 Online Practice Questions and Exam Preparation

Fortinet NSE7_EFW-6.4 Online Questions & Answers

• Question 31:

  An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator noticed that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link- failed-signal to fix the problem. Which statement is correct regarding this command?

  A. Forces the former primary device to shut down all its non-heartbeat interfaces for one second while the failover occurs.
  B. Sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.
  C. Sends a link failed signal to all connected devices.
  D. Disables all the non-heartbeat interfaces in all the HA members for two seconds after a failover.
  A. Forces the former primary device to shut down all its non-heartbeat interfaces for one second while the failover occurs.

• Question 32:

  Four FortiGate devices configured for OSPF connected to the same broadcast domain. The first unit is elected as the designated router The second unit is elected as the backup designated router Under normal operation, how many OSPF full adjacencies are formed to each of the other two units?

  A. 1
  B. 2
  C. 3
  D. 4
  B. 2

• Question 33:

  View the exhibit, which contains an entry in the session table, and then answer the question below.

  

  Which one of the following statements is true regarding FortiGate's inspection of this session?

  A. FortiGate applied proxy-based inspection.
  B. FortiGate forwarded this session without any inspection.
  C. FortiGate applied flow-based inspection.
  D. FortiGate applied explicit proxy-based inspection.
  A. FortiGate applied proxy-based inspection.

• Question 34:

  The logs in a FSSO collector agent (CA) are showing the following error: failed to connect to registry: PIKA1026 (192.168.12.232)

  What can be the reason for this error?

  A. The CA cannot resolve the name of the workstation.
  B. The FortiGate cannot resolve the name of the workstation.
  C. The remote registry service is not running in the workstation 192.168.12.232.
  D. The CA cannot reach the FortiGate with the IP address 192.168.12.232.
  C. The remote registry service is not running in the workstation 192.168.12.232.

• Question 35:

  View the exhibit, which contains the output of a diagnose command, and then answer the question below.

  

  Which statements are true regarding the output in the exhibit? (Choose two.)

  A. FortiGate will probe 121.111.236.179 every fifteen minutes for a response.
  B. Servers with the D flag are considered to be down.
  C. Servers with a negative TZ value are experiencing a service outage.
  D. FortiGate used 209.222.147.3 as the initial server to validate its contract.
  A. FortiGate will probe 121.111.236.179 every fifteen minutes for a response.
  D. FortiGate used 209.222.147.3 as the initial server to validate its contract.

• Question 36:

  Exhibits:

  

  Refer to the exhibits, which contain the network topology and BGP configuration for a hub.

  An administrator is trying to configure ADVPN with a hub-spoke VPN setup using iBGP. All the VPNs are up and connected to the hub. The hub is receiving route information from both spokes over iBGP; however, the spokes are not receiving

  route information from each other.

  What change must the administrator make to the hub BGP configuration so that the routes learned by one spoke are forwarded to the other spokes?

  A. Configure an individual neighbor and remove neighbor-range configuration.
  B. Configure the hub as a route reflector client.
  C. Change the router id to 10.1.0.254.
  D. Make the configuration of remote-as different from the configuration of local-as.
  B. Configure the hub as a route reflector client.

• Question 37:

  View the following FortiGate configuration.

  

  All traffic to the Internet currently egresses from port1. The exhibit shows partial session information for Internet traffic from a user on the internal network:

  

  If the priority on route ID 1 were changed from 5 to 20, what would happen to traffic matching that user's session?

  A. The session would remain in the session table, and its traffic would still egress from port1.
  B. The session would remain in the session table, but its traffic would now egress from both port1 and port2.
  C. The session would remain in the session table, and its traffic would start to egress from port2.
  D. The session would be deleted, so the client would need to start a new session.
  A. The session would remain in the session table, and its traffic would still egress from port1.

• Question 38:

  View these partial outputs from two routing debug commands:

  

  Which outbound interface will FortiGate use to route web traffic from internal users to the Internet?

  A. Both port1 and port2
  B. port3
  C. port1
  D. port2
  C. port1

• Question 39:

  Examine the output of the 'diagnose debug rating' command shown in the exhibit; then answer the question below.

  

  Which statement are true regarding the output in the exhibit? (Choose two.)

  A. There are three FortiGuard servers that are not responding to the queries sent by the FortiGate.
  B. The TZ value represents the delta between each FortiGuard server's time zone and the FortiGate's time zone.
  C. FortiGate will send the FortiGuard queries to the server with highest weight.
  D. A server's round trip delay (RTT) is not used to calculate its weight.
  B. The TZ value represents the delta between each FortiGuard server's time zone and the FortiGate's time zone.
  C. FortiGate will send the FortiGuard queries to the server with highest weight.

• Question 40:

  An LDAP user cannot authenticate against a FortiGate device. Examine the real time debug output shown in the exhibit when the user attempted the authentication; then answer the question below.

  

  Based on the output in the exhibit, what can cause this authentication problem?

  A. User student is not found in the LDAP server.
  B. User student is using a wrong password.
  C. The FortiGate has been configured with the wrong password for the LDAP administrator.
  D. The FortiGate has been configured with the wrong authentication schema.
  A. User student is not found in the LDAP server.