NSE7_EFW-6.4 Practice Questions Preview

Question 1

Single choice

Four FortiGate devices configured for OSPF connected to the same broadcast domain.
The first unit is elected as the designated router The second unit is elected as the backup designated router Under normal operation, how many OSPF full adjacencies are formed to each of the other two units?

A
1
B
2
C
3
D
4

Reveal answer details Close answer details

Correct answerB

Question 2

Multiple choice

Which two statements about the Security Fabric are true? (Choose two.)

A
Only the root FortiGate collects network information and forwards it to FortiAnalyzer.
B
FortiGate uses FortiTelemetry protocol to communicate with FortiAnalyzer.
C
All FortiGate devices in the Security Fabric must have bidirectional FortiTelemetry connectivity.
D
Branch FortiGate devices must be configured first.

Reveal answer details Close answer details

Correct answersB, C

Explanation

References:
https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/327890/deploying-security-fabric

Question 3

Single choice

A FortiGate is configured as an explicit web proxy. Clients using this web proxy are reposting DNS errors when accessing any website. The administrator executes the following debug commands and observes that the n-dns-timeout counter is increasing:

What should the administrator check to fix the problem?

A
The connectivity between the FortiGate unit and the DNS server.
B
The connectivity between the client workstations and the DNS server.
C
That DNS traffic from client workstations is allowed by the explicit web proxy policies.
D
That DNS service is enabled in the explicit web proxy interface.

Reveal answer details Close answer details

Correct answerA

Question 4

Multiple choice

Refer to the exhibit, which contains the partial output of a diagnose command.

Based on the output, which two statements are correct? (Choose two.)

A
Anti-replay is enabled.
B
DPD is disabled.
C
Remote gateway IP is 10.200.4.1.
D
Quick mode selectors are disabled.

Reveal answer details Close answer details

Correct answersA, C

Question 5

Single choice

View the exhibit, which contains the output of a real-time debug,

Which statement about this output is true?

Which of the following statements is true regarding this output?

A
The requested URL belongs to category ID 255.
B
The server hostname Is training, fortinet.com.
C
FortiGate found the requested URL in its local cache.
D
This web request was inspected using the ftgd-allow web filler profile.

Reveal answer details Close answer details

Correct answerC

Question 6

Multiple choice

Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.)

A
IPS failopen
B
mem failopen
C
AV failopen
D
UTM failopen

Reveal answer details Close answer details

Correct answersA, C

Question 7

Multiple choice

What configuration changes can reduce the memory utilization in a FortiGate? (Choose two.)

A
Reduce the session time to live.
B
Increase the TCP session timers.
C
Increase the FortiGuard cache time to live.
D
Reduce the maximum file size to inspect.

Reveal answer details Close answer details

Correct answersA, D

Question 8

Single choice

Examine the partial output from the IKE real time debug shown in the exhibit; then answer the question
below.

Why didn't the tunnel come up?

A
IKE mode configuration is not enabled in the remote IPsec gateway.
B
The remote gateway's Phase-2 configuration does not match the local gateway's phase- 2 configuration.
C
The remote gateway's Phase-1 configuration does not match the local gateway's phase- 1 configuration.
D
One IPsec gateway is using main mode, while the other IPsec gateway is using aggressive mode.

Reveal answer details Close answer details

Correct answerC

Question 9

Multiple choice

Refer to the exhibits.

Which contain the partial configurations of two VPNs on FortiGate.

An administrator has configured two VPNs for two different user groups. Users who are in the Users-2 group are not able to connect to the VPN. After running a diagnostics command, the administrator discovered that FortiGate is not matching the user-2 VPN for members of the Users-2 group.

Which two changes must administrator make to fix the issue? (Choose two.)

A
Use different pre-shared keys on both VPNs
B
Enable Mode Config on both VPNs.
C
Set up specific peer IDs on both VPNs.
D
Change to aggressive mode on both VPNs.

Reveal answer details Close answer details

Correct answersC, D

Question 10

Multiple choice

View the exhibit, which contains the output of diagnose sys session stat, and then answer the question below.

Which statements are correct regarding the output shown? (Choose two.)

A
There are 0 ephemeral sessions.
B
All the sessions in the session table are TCP sessions.
C
No sessions have been deleted because of memory pages exhaustion.
D
There are 166 TCP sessions waiting to complete the three-way handshake.

Reveal answer details Close answer details

Correct answersA, C

Explanation

https://kb.fortinet.com/kb/documentLink.do?externalID=FD40578

Question 11

Multiple choice

View the exhibit, which contains the output of a debug command, and then answer the question below.

Which of the following statements about the exhibit are true? (Choose two.)

A
In the network on port4, two OSPF routers are down.
B
Port4 is connected to the OSPF backbone area.
C
The local FortiGate's OSPF router ID is 0.0.0.4
D
The local FortiGate has been elected as the OSPF backup designated router.

Reveal answer details Close answer details

Correct answersB, C

Question 12

Single choice

View the exhibit, which contains the output of a web diagnose command, and then answer the question below.

Which one of the following statements explains why the cache statistics are all zeros?

A
The administrator has reallocated the cache memory to a separate process.
B
There are no users making web requests.
C
The FortiGuard web filter cache is disabled in the FortiGate's configuration.
D
FortiGate is using a flow-based web filter and the cache applies only to proxy-based inspection.

Reveal answer details Close answer details

Correct answerC

Question 13

Single choice

When does a RADIUS server send an Access-Challenge packet?

A
The server does not have the user credentials yet.
B
The server requires more information from the user, such as the token code for two-factor authentication.
C
The user credentials are wrong.
D
The user account is not found in the server.

Reveal answer details Close answer details

Correct answerB

Question 14

Multiple choice

Which two conditions must be met for a statistic route to be active in the routing table? (Choose two.)

A
The link health monitor (if configured) is up.
B
There is no other route, to the same destination, with a higher distance.
C
The outgoing interface is up.
D
The next-hop IP address is up.

Reveal answer details Close answer details

Correct answersA, C

Question 15

Multiple choice

Refer to the exhibit, which shows the output of a debug command.

Which two statements about the output are true? (Choose two.)

A
The local FortiGate OSPF router ID is 0.0.0.4.
B
Port4 is connected to the OSPF backbone area.
C
In the network connected to port4, two OSPF routers are down.
D
The local FortiGate is the backup designated router.

Reveal answer details Close answer details

Correct answersA, B

Explanation

Area 0.0.0.0 is the backbone area.

Question 16

Multiple choice

Refer to the exhibit, which contains the debug output of diagnose dvm device list.

Which two statements about the output shown in the exhibit are correct? (Choose two.)

A
ADOMs are disabled on the FortiManager
B
The FortiGate configuration is in sync with latest running revision history.
C
There are pending device-level changes yet to be installed on Local-FortiGate.
D
The policy package has been modified for Local-FortiGate.

Reveal answer details Close answer details

Correct answersB, C

Explanation

References:
https://docs.fortinet.com/document/fortimanager/7.0.0/upgrade-guide/959309/cli-example-of-diagnose-dvm-device-list

Question 17

Single choice

Refer to the exhibit, which contains the output of a BGP debug command.

Which statement about the exhibit is true?

A
The local router has received a total of three BGP prefixes from all peers.
B
The local router has not established a TCP session with 100.64.3.1.
C
Since the counters were last reset, the 10.200.3.1 peer has never been down.
D
The local router BGP state is OpenConfirm with the 10.127.0.75 peer.

Reveal answer details Close answer details

Correct answerB

Question 18

Single choice

Refer to the exhibit, which shows a session entry.

Which statement about this session is true?

A
It is an ICMP session from 10.1.10.10 to 10.200.5. 1.
B
It is a TCP session in close_wait state, from 10. l. 10.10 to 10.200.1.1.
C
It is an ICMP session from 10.1.10.10 to 10.200.1.1.
D
It is a TCP session in the established state, from 10.1.10.10 to 10.200.5.1.

Reveal answer details Close answer details

Correct answerA

Question 19

Single choice

Which of the following statements is true regarding a FortiGate configured as an explicit web proxy?

A
FortiGate limits the number of simultaneous sessions per explicit web proxy user. This limit CANNOT be modified by the administrator.
B
FortiGate limits the total number of simultaneous explicit web proxy users.
C
FortiGate limits the number of simultaneous sessions per explicit web proxy user The limit CAN be modified by the administrator
D
FortiGate limits the number of workstations that authenticate using the same web proxy user credentials. This limit CANNOT be modified by the administrator.

Reveal answer details Close answer details

Correct answerB

Explanation

Explanation:
https://help.fortinet.com/fos50hlp/52data/Content/FortiOS/fortigate-WAN-opt-52/web_proxy.htm#Explicit2
The explicit proxy does not limit the number of active sessions for each user. As a result the actual explicit proxy session count is usually much higher than the number of explicit web proxy users. If an excessive number of explicit web proxy sessions is compromising system performance you can limit the amount of users if the FortiGate unit is operating with multiple VDOMs.