Fortinet NSE7_EFW-7.0 Online Practice Questions and Exam Preparation

Fortinet NSE7_EFW-7.0 Online Questions & Answers

• Question 161:

  View the central management configuration shown in the exhibit, and then answer the question below.

  

  Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?

  A. 10.0.1.240
  B. One of the public FortiGuard distribution servers
  C. 10.0.1.244
  D. 10.0.1.242
  B. One of the public FortiGuard distribution servers

• Question 162:

  Refer to the exhibit, which shows partial outputs from two routing debug commands.

  

  Which change must an administrator make on FortiGate to route web traffic from internal users to the internet, using ECMP?

  A. Set the priority of the static default route using port1 to 10. Most Voted
  B. Set the priority of the static default route using port2 to 1.
  C. Set preserve-session-route to enable.
  D. Set snat-route-change to enable.
  A. Set the priority of the static default route using port1 to 10. Most Voted

  ---

  Explanation/Reference:

  ECMP pre-requisite is "routes must have the same destination and costs. In the case of static routes, costs include distance and priority". In this case traffic is routed through port 1 because of the lower priority. If we raise priority on port 1 to the value of 10 the traffic should be routed through both ports 1 and 2. https://docs.fortinet.com/document/fortigate/7.0.1/administration-guide/25967/equal-cost- multi-path

• Question 163:

  Refer to the exhibit, which shows the output of a diagnose command.

  

  What can be concluded about the debug output in this scenario?

  A. Servers with a negative TZ value are less preferred for rating requests.
  B. There is a natural correlation between the value in the Packets field and the value in the Weight field.
  C. FortiGate used 64.26.151.37 as the initial server to validate its contract.
  D. The first server provided to FortiGate when it performed a DNS query looking for a list of rating servers, was 121.111.236.179.
  B. There is a natural correlation between the value in the Packets field and the value in the Weight field.