Fortinet Fortinet Certifications NSE7_EFW-6.4 Questions & Answers

• Question 61:

  View the exhibit, which contains the output of a debug command, and then answer the question below.

  

  What statement is correct about this FortiGate?

  A. It is currently in system conserve mode because of high CPU usage.

  B. It is currently in FD conserve mode.

  C. It is currently in kernel conserve mode because of high memory usage.

  D. It is currently in system conserve mode because of high memory usage.

  Correct Answer: D

• Question 62:

  Refer to the exhibit, which contains the output of a BGP debug command.

  

  Which statement about the exhibit is true?

  A. The local router has received a total of three BGP prefixes from all peers.

  B. The local router has not established a TCP session with 100.64.3.1.

  C. Since the counters were last reset, the 10.200.3.1 peer has never been down.

  D. The local router BGP state is OpenConfirm with the 10.127.0.75 peer.

  Correct Answer: B

• Question 63:

  View the exhibit, which contains the output of a web diagnose command, and then answer the question below.

  

  Which one of the following statements explains why the cache statistics are all zeros?

  A. The administrator has reallocated the cache memory to a separate process.

  B. There are no users making web requests.

  C. The FortiGuard web filter cache is disabled in the FortiGate's configuration.

  D. FortiGate is using a flow-based web filter and the cache applies only to proxy-based inspection.

  Correct Answer: C

• Question 64:

  What configuration changes can reduce the memory utilization in a FortiGate? (Choose two.)

  A. Reduce the session time to live.

  B. Increase the TCP session timers.

  C. Increase the FortiGuard cache time to live.

  D. Reduce the maximum file size to inspect.

  Correct Answer: AD

• Question 65:

  An administrator has enabled HA session synchronization in a HA cluster with two members. Which flag is added to a primary unit's session to indicate that it has been synchronized to the secondary unit?

  A. redir.

  B. dirty.

  C. synced

  D. nds.

  Correct Answer: C

  The synced sessions have the `synced' flag. The command `diag sys session list' can be used to see the sessions on the member, with the associated flags.

• Question 66:

  Examine the output of the `get router info ospf neighbor' command shown in the exhibit; then answer the question below.

  

  Refer to the exhibit, which shows the output of a debug command.

  Which statement about the output is true?

  A. TheOSPF routers with the IDs 0.0.0.69 and 0.0.0.117 are both designated routers for the war. l network.

  B. The OSPF router with the ID 0.0.0.2 is the designated router for the ToRemote network.

  C. The local FortiGate is the designated router for the wan1 network.

  D. The interface ToRemote is a point-to-point OSPF network.

  Correct Answer: D

  https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/13685-13.html

• Question 67:

  Examine the output from the 'diagnose debug authd fsso list' command; then answer the question below.

  # diagnose debug authd fsso list --FSSO logons-IP: 192.168.3.1 User: STUDENT Groups: TRAININGAD/

  USERS Workstation: INTERNAL2. TRAINING. LAB The IP address 192.168.3.1 is NOT the one used by

  the workstation INTERNAL2. TRAINING.

  LAB.

  What should the administrator check?

  A. The IP address recorded in the logon event for the user STUDENT.

  B. The DNS name resolution for the workstation name INTERNAL2. TRAINING. LAB.

  C. The source IP address of the traffic arriving to the FortiGate from the workstation INTERNAL2. TRAINING. LAB.

  D. The reserve DNS lookup forthe IP address 192.168.3.1.

  Correct Answer: C

• Question 68:

  Which two statements about FortiManager is true when it is deployed as a local FDS? (Choose two.)

  A. It caches available firmware updates for unmanaged devices.

  B. It can be configured as an update server, or a rating server, but not both.

  C. It supports rating requests from both managed and unmanaged devices.

  D. It provides VM license validation services.

  Correct Answer: CD

• Question 69:

  View the following FortiGate configuration.

  

  All traffic to the Internet currently egresses from port1. The exhibit shows partial session information for Internet traffic from a user on the internal network:

  

  If the priority on route ID 1 were changed from 5 to 20, what would happen to traffic matching that user's session?

  A. The session would remain in the session table, and its traffic would still egress from port1.

  B. The session would remain in the session table, but its traffic would now egress from both port1 and port2.

  C. The session would remain in the session table, and its traffic would start to egress from port2.

  D. The session would be deleted, so the client would need to start a new session.

  Correct Answer: A

  http://kb.fortinet.com/kb/documentLink.do?externalID=FD40943

• Question 70:

  Refer to the exhibits.

  

  Which contain the partial configurations of two VPNs on FortiGate.

  An administrator has configured two VPNs for two different user groups. Users who are in the Users-2 group are not able to connect to the VPN. After running a diagnostics command, the administrator discovered that FortiGate is not matching the user-2 VPN for members of the Users-2 group.

  Which two changes must administrator make to fix the issue? (Choose two.)

  A. Use different pre-shared keys on both VPNs

  B. Enable Mode Config on both VPNs.

  C. Set up specific peer IDs on both VPNs.

  D. Change to aggressive mode on both VPNs.

  Correct Answer: CD