NSE7_EFW-7.0 questions and answers

How are bulk configuration changes made using FortiManager CLI scripts? (Choose two.)

Refer to the exhibit, which contains partial output from an IKE real-time debug.

Based on the debug output, which phase 1 setting is enabled in the configuration of this VPN?

View the exhibit, which contains a partial routing table, and then answer the question below.

Assuming all the appropriate firewall policies are configured, which of the following pings will FortiGate route? (Choose two.)

Refer to the exhibits, which show the configuration on FortiGate and partial internet session information from a user on the internal network.

An administrator would like to test session failover between the two service provider connections.

What changes must the administrator make to force this existing session to immediately start using the other interface? (Choose two.)

View the exhibit, which contains the output of a debug command, and then answer the question below.

What statement is correct about this FortiGate?

Refer to the exhibit, which contains partial output from an IKE real-time debug.

Which two statements about this debug output are correct? (Choose two.)

A FortiGate's portl is connected to a private network. Its port2 is connected to the Internet. Explicit web proxy is enabled in port1 and only explicit web proxy users can access the Internet. Web cache is NOT enabled. An internal web proxy user is downloading a file from the Internet via HTTP.

Which statements are true regarding the two entries in the FortiGate session table related with this traffic? (Choose two.)

Examine the partial output from two web filter debug commands; then answer the question below:

Based on the above outputs, which is the FortiGuard web filter category for the web site www.fgt99.
com?

In which two ways does FortiManager function when it is deployed as a local FDS? (Choose two.)

Which two statements about bulk configuration changes made using FortiManager CLI scripts are correct? (Choose two.)

Four FortiGate devices configured for OSPF connected to the same broadcast domain.
The first unit is elected as the designated router The second unit is elected as the backup designated router Under normal operation, how many OSPF full adjacencies are formed to each of the other two units?

What configuration changes can reduce the memory utilization in a FortiGate? (Choose two.)

A FortiGate is configured as an explicit web proxy. Clients using this web proxy are reposting DNS errors when accessing any website. The administrator executes the following debug commands and observes that the n-dns-timeout counter is increasing:

What should the administrator check to fix the problem?

Which two tasks are automated using the Install Wizard on FortiManager? (Choose two.)

Examine the output of the `get router info ospf neighbor' command shown in the exhibit; then answer the
question below.

Which statements are true regarding the output in the exhibit? (Choose two.) Refer to the exhibit, which shows the output of a debug command.

Which statement about the output is true?

Which of the following conditions must be met for a static route to be active in the routing table? (Choose three.)

View the exhibit, which contains the output of a BGP debug command, and then answer the question below.

Which of the following statements about the exhibit are true? (Choose two.)

When does a RADIUS server send an Access-Challenge packet?

View the exhibit, which contains the output of a debug command, and then answer the question below.

Which of the following statements about the exhibit are true? (Choose two.)

A FortiGate is rebooting unexpectedly without any apparent reason.

What troubleshooting tools could an administrator use to get more information about the problem? (Choose two.)

What is the diagnose test application ipsmenitor 5 command used for?

A corporate network allows Internet Access to FSSO users only. The FSSO user student does not have Internet access after successfully logged into the Windows AD network. The output of the `diagnose debug authd fsso list' command does not show student as an active FSSO user. Other FSSO users can access the Internet without problems.

What should the administrator check? (Choose two.)

Which statement about NGFW policy-based application filtering is true?

View the exhibit, which contains a screenshot of some phase-1 settings, and then answer the question below.

The VPN is up, and DPD packets are being exchanged between both IPsec gateways; however, traffic
cannot pass through the tunnel. To diagnose, the administrator enters these CLI commands:

However, the IKE real time debug does not show any output.

Why?

Refer to the exhibit, which shows a partial routing table.

Assuming all the appropriate firewall policies are configured, which two pings will FortiGate route? (Choose two.)