Fortinet NSE7_EFW-6.4 Online Practice Questions and Exam Preparation

Fortinet NSE7_EFW-6.4 Online Questions & Answers

• Question 71:

  Examine the following partial output from a sniffer command; then answer the question below.

  

  What is the meaning of the packets dropped counter at the end of the sniffer?

  A. Number of packets that didn't match the sniffer filter.
  B. Number of total packets dropped by the FortiGate.
  C. Number of packets that matched the sniffer filter and were dropped by the FortiGate.
  D. Number of packets that matched the sniffer filter but could not be captured by the sniffer.
  D. Number of packets that matched the sniffer filter but could not be captured by the sniffer.

• Question 72:

  A FortiGate device has the following LDAP configuration:

  

  The LDAP user student cannot authenticate. The exhibit shows the output of the authentication real time debug while testing the student account:

  

  Based on the above output, what FortiGate LDAP settings must the administer check? (Choose two.)

  A. cnid.
  B. username.
  C. password.
  D. dn.
  B. username.
  C. password.

• Question 73:

  Refer to the exhibit, which contains the partial output of a diagnose command.

  

  Based on the output, which two statements are correct? (Choose two.)

  A. Anti-replay is enabled
  B. The remote gateway IP is 10.200.4.1.
  C. DPD is disabled.
  D. Quick mode selectors are disabled.
  A. Anti-replay is enabled
  B. The remote gateway IP is 10.200.4.1.

• Question 74:

  View the exhibit, which contains the output of a debug command, and then answer the question below.

  

  Which of the following statements about the exhibit are true? (Choose two.)

  A. In the network on port4, two OSPF routers are down.
  B. Port4 is connected to the OSPF backbone area.
  C. The local FortiGate's OSPF router ID is 0.0.0.4
  D. The local FortiGate has been elected as the OSPF backup designated router.
  B. Port4 is connected to the OSPF backbone area.
  C. The local FortiGate's OSPF router ID is 0.0.0.4

• Question 75:

  In which two states is a given session categorized as ephemeral? (Choose two.)

  A. A TCP session waiting to complete the three-way handshake.
  B. A TCP session waiting for FIN ACK.
  C. A UDP session with packets sent and received.
  D. A UDP session with only one packet received.
  A. A TCP session waiting to complete the three-way handshake.
  D. A UDP session with only one packet received.

• Question 76:

  Refer to the exhibit, which contains the partial output of the get vpn ipsec tunnel details command.

  

  Based on the output, which two statements are correct? (Choose two.)

  A. Phase 2 authentication is set to sha1 on both sides.
  B. Anti-replay is disabled.
  C. Hub2Spoke1 is a policy-based VPN.
  D. Hub2Spoke1 is configured on interface wan2.
  A. Phase 2 authentication is set to sha1 on both sides.
  D. Hub2Spoke1 is configured on interface wan2.

• Question 77:

  View the exhibit, which contains the output of a debug command, and then answer the question below.

  

  Which one of the following statements about this FortiGate is correct?

  A. It is currently in system conserve mode because of high CPU usage.
  B. It is currently in extreme conserve mode because of high memory usage.
  C. It is currently in proxy conserve mode because of high memory usage.
  D. It is currently in memory conserve mode because of high memory usage.
  D. It is currently in memory conserve mode because of high memory usage.

• Question 78:

  View the exhibit, which contains a partial output of an IKE real-time debug, and then answer the question below.

  

  Based on the debug output, which phase-1 setting is enabled in the configuration of this VPN?

  A. auto-discovery-sender
  B. auto-discovery-forwarder
  C. auto-discovery-shortcut
  D. auto-discovery-receiver
  B. auto-discovery-forwarder

• Question 79:

  An administrator has configured a FortiGate device with two VDOMs: root and internal. The administrator has also created and inter-VDOM link that connects both VDOMs. The objective is to have each VDOM advertise some routes to the other VDOM via OSPF through the inter-VDOM link. What OSPF configuration settings must match in both VDOMs to have the OSPF adjacency successfully forming? (Choose three.)

  A. Router ID.
  B. OSPF interface area.
  C. OSPF interface cost.
  D. OSPF interface MTU.
  E. Interface subnet mask.
  B. OSPF interface area.
  D. OSPF interface MTU.
  E. Interface subnet mask.

• Question 80:

  View the exhibit, which contains the output of a diagnose command, and then answer the question below.

  

  What statements are correct regarding the output? (Choose two.)

  A. This is an expected session created by a session helper.
  B. Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next-hop IP address 10.0.1.10.
  C. Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next-hop IP address 10.200.1.1.
  D. This is an expected session created by an application control profile.
  A. This is an expected session created by a session helper.
  C. Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next-hop IP address 10.200.1.1.