Fortinet NSE7_EFW-6.4 Online Practice Questions and Exam Preparation

Fortinet NSE7_EFW-6.4 Online Questions & Answers

• Question 51:

  Examine the output of the `get router info bgp summary' command shown in the exhibit; then answer the question below.

  

  Which statement can explain why the state of the remote BGP peer 10.200.3.1 is Connect?

  A. The local peer is receiving the BGP keepalives from the remote peer but it has not received any BGP prefix yet.
  B. The TCP session for the BGP connection to 10.200.3.1 is down.
  C. The local peer has received the BGP prefixed from the remote peer.
  D. The local peer is receiving the BGP keepalives from the remote peer but it has not received the OpenConfirm yet.
  B. The TCP session for the BGP connection to 10.200.3.1 is down.

• Question 52:

  What does the dirty flag mean in a FortiGate session?

  A. Traffic has been blocked by the antivirus inspection.
  B. The next packet must be re-evaluated against the firewall policies.
  C. The session must be removed from the former primary unit after an HA failover.
  D. Traffic has been identified as from an application that is not allowed.
  B. The next packet must be re-evaluated against the firewall policies.

• Question 53:

  Refer to the exhibit, which contains the partial output of a diagnose command.

  

  Based on the output, which two statements are correct? (Choose two.)

  A. Anti-replay is enabled.
  B. DPD is disabled.
  C. Remote gateway IP is 10.200.4.1.
  D. Quick mode selectors are disabled.
  A. Anti-replay is enabled.
  C. Remote gateway IP is 10.200.4.1.

• Question 54:

  What is the diagnose test application ipsmonitor 99 command used for?

  A. To enable IPS bypass mode
  B. To provide information regarding IPS sessions
  C. To disable the IPS engine
  D. To restart all IPS engines and monitors
  D. To restart all IPS engines and monitors

• Question 55:

  Which statements about bulk configuration changes using FortiManager CLI scripts are correct? (Choose two.)

  A. When executed on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate.
  B. When executed on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate.
  C. When executed on the All FortiGate in ADOM, changes are automatically installed without creating a new revision history.
  D. When executed on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.
  B. When executed on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate.
  D. When executed on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.

• Question 56:

  Refer to the exhibits.

  

  Which contain the partial configurations of two VPNs on FortiGate.

  An administrator has configured two VPNs for two different user groups. Users who are in the Users-2 group are not able to connect to the VPN. After running a diagnostics command, the administrator discovered that FortiGate is not

  matching the user-2 VPN for members of the Users-2 group.

  Which two changes must administrator make to fix the issue? (Choose two.)

  A. Use different pre-shared keys on both VPNs
  B. Enable Mode Config on both VPNs.
  C. Set up specific peer IDs on both VPNs.
  D. Change to aggressive mode on both VPNs.
  C. Set up specific peer IDs on both VPNs.
  D. Change to aggressive mode on both VPNs.

• Question 57:

  View the exhibit, which contains the output of a diagnose command, and the answer the question below.

  

  Which statements are true regarding the Weight value?

  A. Its initial value is calculated based on the round trip delay (RTT).
  B. Its initial value is statically set to 10.
  C. Its value is incremented with each packet lost.
  D. It determines which FortiGuard server is used for license validation.
  C. Its value is incremented with each packet lost.

• Question 58:

  An administrator has enabled HA session synchronization in a HA cluster with two members. Which flag is added to a primary unit's session to indicate that it has been synchronized to the secondary unit?

  A. redir.
  B. dirty.
  C. synced
  D. nds.
  C. synced

• Question 59:

  View the global IPS configuration, and then answer the question below.

  

  Which of the following statements is true regarding this configuration?

  A. IPS will scan every byte in every session.
  B. FortiGate will spawn IPS engine instances based on the system load.
  C. New packets will be passed through without inspection if the IPS socket buffer runs out of memory.
  D. IPS will use the faster matching algorithm which is only available for units with more than 4 GB memory.
  A. IPS will scan every byte in every session.

• Question 60:

  Two independent FortiGate HA clusters are connected to the same broadcast domain. The administrator has reported that both clusters are using the same HA virtual MAC address. This creates a duplicated MAC address problem in the network. What HA setting must be changed in one of the HA clusters to fix the problem?

  A. Group ID.
  B. Group name.
  C. Session pickup.
  D. Gratuitous ARPs.
  A. Group ID.