Fortinet Fortinet Certifications NSE7_EFW-7.0 Questions & Answers

• Question 71:

  View the exhibit, which contains the output of a web diagnose command, and then answer the question below.

  

  Which one of the following statements explains why the cache statistics are all zeros?

  A. The administrator has reallocated the cache memory to a separate process.

  B. There are no users making web requests.

  C. The FortiGuard web filter cache is disabled in the FortiGate's configuration.

  D. FortiGate is using a flow-based web filter and the cache applies only to proxy-based inspection.

  Correct Answer: C

• Question 72:

  Refer to the exhibit, which shows a central management configuration.

  

  Which server will FortiGate choose for web filter rating requests, if 10.0.1.240 is experiencing an outage?

  A. Public FortiGuard servers

  B. 10.0.1.243

  C. 10.0.1.242

  D. 10.0.1.244

  Correct Answer: D

  Explanation: by default,( include-default-servers ) enabled .this allows fortigate to communicate with the public fortiguard servers , if the fortimanger devices (configured in server-list) are unavailable .

• Question 73:

  View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.

  

  Why didn't the tunnel come up?

  A. The pre-shared keys do not match.

  B. The remote gateway's phase 2 configuration does not match the local gateway's phase 2 configuration.

  C. The remote gateway's phase 1 configuration does not match the local gateway's phase 1 configuration.

  D. The remote gateway is using aggressive mode and the local gateway is configured to use man mode.

  Correct Answer: C

• Question 74:

  Examine the following partial output from two system debug commands; then answer the question below.

  

  Which of the following statements are true regarding the above outputs? (Choose two.)

  A. The unit is running a 32-bit FortiOS

  B. The unit is in kernel conserve mode

  C. The Cached value is always the Active value plus the Inactive value

  D. Kernel indirectly accesses the low memory (LowTotal) through memory paging

  Correct Answer: AC

• Question 75:

  An administrator is running the following sniffer in a FortiGate:

  diagnose sniffer packet any "host 10.0.2.10" 2

  What information is included in the output of the sniffer? (Choose two.)

  A. Ethernet headers.

  B. IP payload.

  C. IP headers.

  D. Port names.

  Correct Answer: BC

  https://kb.fortinet.com/kb/documentLink.do?externalID=11186

• Question 76:

  When does a RADIUS server send an Access-Challenge packet?

  A. The server does not have the user credentials yet.

  B. The server requires more information from the user, such as the token code for two- factor authentication.

  C. The user credentials are wrong.

  D. The user account is not found in the server.

  Correct Answer: B

• Question 77:

  A FortiGate device has the following LDAP configuration:

  

  The LDAP user student cannot authenticate. The exhibit shows the output of the authentication real time debug while testing the student account:

  

  Based on the above output, what FortiGate LDAP settings must the administer check? (Choose two.)

  A. cnid.

  B. username.

  C. password.

  D. dn.

  Correct Answer: BC

  https://kb.fortinet.com/kb/viewContent.do?externalId=13141

• Question 78:

  View these partial outputs from two routing debug commands:

  

  Which outbound interface will FortiGate use to route web traffic from internal users to the Internet?

  A. Both port1 and port2

  B. port3

  C. port1

  D. port2

  Correct Answer: C

• Question 79:

  What does the dirty flag mean in a FortiGate session?

  A. Traffic has been blocked by the antivirus inspection.

  B. The next packet must be re-evaluated against the firewall policies.

  C. The session must be removed from the former primary unit after an HA failover.

  D. Traffic has been identified as from an application that is not allowed.

  Correct Answer: B

  https://kb.fortinet.com/kb/viewContent.do?externalId=FD40119andsliceId=1

• Question 80:

  View the exhibit, which contains the output of a BGP debug command, and then answer the question below.

  

  Which of the following statements about the exhibit are true? (Choose two.)

  A. The local router's BGP state is Established with the 10.125.0.60 peer.

  B. Since the counters were last reset; the 10.200.3.1 peer has never been down.

  C. The local router has received a total of three BGP prefixes from all peers.

  D. The local router has not established a TCP session with 100.64.3.1.

  Correct Answer: AD