Fortinet Fortinet Certifications NSE7_EFW Questions & Answers

• Question 81:

  View the exhibit, which contains the output of a debug command, and then answer the question below.

  

  What statement is correct about this FortiGate?

  A. It is currently in system conserve mode because of high CPU usage.

  B. It is currently in FD conserve mode.

  C. It is currently in kernel conserve mode because of high memory usage.

  D. It is currently in system conserve mode because of high memory usage.

  Correct Answer: D

• Question 82:

  View the exhibit, which contains the output of diagnose sys session stat, and then answer the question below.

  

  Which statements are correct regarding the output shown? (Choose two.)

  A. There are 0 ephemeral sessions.

  B. All the sessions in the session table are TCP sessions.

  C. No sessions have been deleted because of memory pages exhaustion.

  D. There are 166 TCP sessions waiting to complete the three-way handshake.

  Correct Answer: AD

• Question 83:

  Which of the following tasks are automated using the Install Wizard on FortiManager? (Choose two.)

  A. Preview pending configuration changes for managed devices.

  B. Add devices to FortiManager.

  C. Import policy packages from managed devices.

  D. Install configuration changes to managed devices.

  E. Import interface mappings from managed devices.

  Correct Answer: BD

• Question 84:

  What is the purpose of an internal segmentation firewall (ISFW)?

  A. It inspects incoming traffic to protect services in the corporate DMZ.

  B. It is the first line of defense at the network perimeter.

  C. It splits the network into multiple security segments to minimize the impact of breaches.

  D. It is an all-in-one security appliance that is placed at remote sites to extend the enterprise network.

  Correct Answer: B

• Question 85:

  An administrator has configured a FortiGate device with two VDOMs: root and internal. The administrator has also created and inter-VDOM link that connects both VDOMs. The objective is to have each VDOM advertise some routes to the other VDOM via OSPF through the inter-VDOM link. What OSPF configuration settings must match in both VDOMs to have the OSPF adjacency successfully forming? (Choose three.)

  A. Router ID.

  B. OSPF interface area.

  C. OSPF interface cost.

  D. OSPF interface MTU.

  E. Interface subnet mask.

  Correct Answer: BDE

• Question 86:

  In which of the following states is a given session categorized as ephemeral? (Choose two.)

  A. A TCP session waiting to complete the three-way handshake.

  B. A TCP session waiting for FIN ACK.

  C. A UDP session with packets sent and received.

  D. A UDP session with only one packet received.

  Correct Answer: BC

• Question 87:

  View the exhibit, which contains the output of a diagnose command, and the answer the question below.

  

  Which statements are true regarding the Weight value?

  A. Its initial value is calculated based on the round trip delay (RTT).

  B. Its initial value is statically set to 10.

  C. Its value is incremented with each packet lost.

  D. It determines which FortiGuard server is used for license validation.

  Correct Answer: C

• Question 88:

  An administrator has configured the following CLI script on FortiManager, which failed to apply any changes to the managed device after being executed.

  

  Why didn't the script make any changes to the managed device?

  A. Commands that start with the # sign are not executed.

  B. CLI scripts will add objects only if they are referenced by policies.

  C. Incomplete commands are ignored in CLI scripts.

  D. Static routes can only be added using TCL scripts.

  Correct Answer: B