Fortinet NSE7_EFW-6.4 Online Practice Questions and Exam Preparation

Fortinet NSE7_EFW-6.4 Online Questions & Answers

• Question 81:

  Refer to the exhibit, which shows a session entry. Which statement about this session is true?

  

  A. It is an ICMP session from 10.1.10.10 to 10.200.5. 1.
  B. It is a TCP session in close_wait state, from 10. l. 10.10 to 10.200.1.1.
  C. It is an ICMP session from 10.1.10.10 to 10.200.1.1.
  D. It is a TCP session in the established state, from 10.1.10.10 to 10.200.5.1.
  A. It is an ICMP session from 10.1.10.10 to 10.200.5. 1.

• Question 82:

  A FortiGate's portl is connected to a private network. Its port2 is connected to the Internet. Explicit web proxy is enabled in port1 and only explicit web proxy users can access the Internet. Web cache is NOT enabled. An internal web proxy user is downloading a file from the Internet via HTTP. Which statements are true regarding the two entries in the FortiGate session table related with this traffic? (Choose two.)

  A. Both session have the local flag on.
  B. The destination IP addresses of both sessions are IP addresses assigned to FortiGate's interfaces.
  C. One session has the proxy flag on, the other one does not.
  D. One of the sessions has the IP address of port2 as the source IP address.
  A. Both session have the local flag on.
  D. One of the sessions has the IP address of port2 as the source IP address.

• Question 83:

  Which of the following statements is true regarding a FortiGate configured as an explicit web proxy?

  A. FortiGate limits the number of simultaneous sessions per explicit web proxy user. This limit CANNOT be modified by the administrator.
  B. FortiGate limits the total number of simultaneous explicit web proxy users.
  C. FortiGate limits the number of simultaneous sessions per explicit web proxy user The limit CAN be modified by the administrator
  D. FortiGate limits the number of workstations that authenticate using the same web proxy user credentials. This limit CANNOT be modified by the administrator.
  B. FortiGate limits the total number of simultaneous explicit web proxy users.

• Question 84:

  How does FortiManager handle FortiGuard requests from FortiGate devices, when it is configured as a local FDS?

  A. FortiManager can download and maintain local copies of FortiGuard databases.
  B. FortiManager supports only FortiGuard push to managed devices.
  C. FortiManager will respond to update requests only if they originate from a managed device.
  D. FortiManager does not support rating requests.
  A. FortiManager can download and maintain local copies of FortiGuard databases.

• Question 85:

  Refer to exhibit, which contains the output of a BGP debug command.

  

  Which statement explains why the state of the 10.200.3.1 peer is Connect?

  A. The local router is receiving BGP keepalives from the remote peer, but the local peer has not received the OpenConfirm yet.
  B. The TCP session to 10.200.3.1 has not completed the three-way handshake.
  C. The local router is receiving the BGP keepalives from the peer, but it has not received a BGP prefix yet.
  D. The local router has received the BGP prefixes from the remote peer.
  B. The TCP session to 10.200.3.1 has not completed the three-way handshake.

• Question 86:

  An administrator is running the following sniffer in a FortiGate:

  diagnose sniffer packet any "host 10.0.2.10" 2

  What information is included in the output of the sniffer? (Choose two.)

  A. Ethernet headers.
  B. IP payload.
  C. IP headers.
  D. Port names.
  B. IP payload.
  C. IP headers.

• Question 87:

  

  Refer to the exhibit, which contains the output of get system ha status. Which two statements about the output are true? (Choose two.)

  A. The slave configuration is synchronized with the master.
  B. port7 is used as the HA heartbeat on all devices in the cluster.
  C. Primary is selected based on the priority configured under config system ha.
  D. The HA management IP is 169.254.0.2.
  B. port7 is used as the HA heartbeat on all devices in the cluster.
  C. Primary is selected based on the priority configured under config system ha.

• Question 88:

  Which two tasks are automated using the Install Wizard on FortiManager? (Choose two.)

  A. Installing configuration changes to managed devices
  B. Importing interface mappings from managed devices
  C. Adding devices to FortiManager
  D. Previewing pending configuration changes for managed devices
  A. Installing configuration changes to managed devices
  D. Previewing pending configuration changes for managed devices

• Question 89:

  Which of the following conditions must be met for a static route to be active in the routing table? (Choose three.)

  A. The next-hop IP address is up.
  B. There is no other route, to the same destination, with a higher distance.
  C. The link health monitor (if configured) is up.
  D. The next-hop IP address belongs to one of the outgoing interface subnets.
  E. The outgoing interface is up.
  C. The link health monitor (if configured) is up.
  D. The next-hop IP address belongs to one of the outgoing interface subnets.
  E. The outgoing interface is up.

• Question 90:

  Refer to the exhibit, which contains partial output from an IKE real-time debug.

  

  Which two statements about this debug output are correct? (Choose two.)

  A. The remote gateway IP address is 10.0.0.1.
  B. The initiator provided remote as its IPsec peer ID.
  C. It shows a phase 1 negotiation.
  D. The negotiation is using AES128 encryption with CBC hash.
  B. The initiator provided remote as its IPsec peer ID.
  C. It shows a phase 1 negotiation.