Summer Special Sale - Limited Time 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 575363r9

Welcome To DumpsPedia
  1. Home
  2. Fortinet
  3. NSE 7 Network Security Architect
  4. NSE7_EFW-6.4
  5. Fortinet NSE 7 - Enterprise Firewall 7.0 Questions and Answers

NSE7_EFW-6.4 Sample Questions Answers

Questions 4

Refer to the exhibit, which contains the output of diagnose sys session list.

If the HA ID for the primary unit is zero (0), which statement about the output is true?

Options:

A.

This session cannot be synced with the slave unit.

B.

The inspection of this session has been offloaded to the slave unit.

C.

The master unit is processing this traffic.

D.

This session is for HA heartbeat traffic.

Buy Now
Questions 5

Which two statements about bulk configuration changes made using FortiManager CLI scripts are correct? (Choose two.)

Options:

A.

When run on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate device.

B.

When run on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.

C.

When run on the All FortiGate in ADOM, changes are automatically installed without the creation of a new revision history.

D.

When run on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate device.

Buy Now
Questions 6

When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filter web requests when the client browser does not provide the server name indication (SNI) extension?

Options:

A.

FortiGate uses the requested URL from the user’s web browser.

B.

FortiGate uses the CN information from the Subject field in the server certificate.

C.

FortiGate blocks the request without any further inspection.

D.

FortiGate switches to the full SSL inspection method to decrypt the data.

Buy Now
Questions 7

Which two tasks are automated using the Install Wizard on FortiManager? (Choose two.)

Options:

A.

Preview pending configuration changes for managed devices.

B.

Add devices to FortiManager.

C.

Import policy packages from managed devices.

D.

Install configuration changes to managed devices.

E.

Import interface mappings from managed devices.

Buy Now
Questions 8

Refer to the exhibit, which contains partial output from an IKE real-time debug.

Which two statements about this debug output are correct? (Choose two.)

Options:

A.

The remote gateway IP address is 10.0.0.1.

B.

The initiator provided remote as its IPsec peer ID.

C.

It shows a phase 1 negotiation.

D.

The negotiation is using AES128 encryption with CBC hash.

Buy Now
Questions 9

View the exhibit, which contains the output of a BGP debug command, and then answer the question below.

Which of the following statements about the exhibit are true? (Choose two.)

Options:

A.

The local router's BGP state is Established with the 10.125.0.60 peer.

B.

Since the counters were last reset; the 10.200.3.1 peer has never been down.

C.

The local router has received a total of three BGP prefixes from all peers.

D.

The local router has not established a TCP session with 100.64.3.1.

Buy Now
Questions 10

Exhibits:

Refer to the exhibits, which contain the network topology and BGP configuration for a hub.

An administrator is trying to configure ADVPN with a hub-spoke VPN setup using iBGP. All the VPNs are up and connected to the hub. The hub is receiving route information from both spokes over iBGP; however, the spokes are not receiving route information from each other.

What change must the administrator make to the hub BGP configuration so that the routes learned by one spoke are forwarded to the other spokes?

Options:

A.

Configure an individual neighbor and remove neighbor-range configuration.

B.

Configure the hub as a route reflector client.

C.

Change the router id to 10.1.0.254.

D.

Make the configuration of remote-as different from the configuration of local-as.

Buy Now
Questions 11

View the exhibit, which contains the output of a diagnose command, and the answer the question below.

Which statements are true regarding the Weight value?

Options:

A.

Its initial value is calculated based on the round trip delay (RTT).

B.

Its initial value is statically set to 10.

C.

Its value is incremented with each packet lost.

D.

It determines which FortiGuard server is used for license validation.

Buy Now
Questions 12

The CLI command set intelligent-mode controls the IPS engine’s adaptive scanning behavior. Which of the following statements describes IPS adaptive scanning?

Options:

A.

Determines the optimal number of IPS engines required based on system load.

B.

Downloads signatures on demand from FDS based on scanning requirements.

C.

Determines when it is secure enough to stop scanning session traffic.

D.

Choose a matching algorithm based on available memory and the type of inspection being performed.

Buy Now
Questions 13

View the IPS exit log, and then answer the question below.

# diagnose test application ipsmonitor 3

ipsengine exit log”

pid = 93 (cfg), duration = 5605322 (s) at Wed Apr 19 09:57:26 2017

code = 11, reason: manual

What is the status of IPS on this FortiGate?

Options:

A.

IPS engine memory consumption has exceeded the model-specific predefined value.

B.

IPS daemon experienced a crash.

C.

There are communication problems between the IPS engine and the management database.

D.

All IPS-related features have been disabled in FortiGate’s configuration.

Buy Now
Questions 14

Examine the output of the ‘diagnose ips anomaly list’ command shown in the exhibit; then answer the question below.

Which IP addresses are included in the output of this command?

Options:

A.

Those whose traffic matches a DoS policy.

B.

Those whose traffic matches an IPS sensor.

C.

Those whose traffic exceeded a threshold of a matching DoS policy.

D.

Those whose traffic was detected as an anomaly by an IPS sensor.

Buy Now
Questions 15

An administrator is running the following sniffer in a FortiGate:

diagnose sniffer packet any “host 10.0.2.10” 2

What information is included in the output of the sniffer? (Choose two.)

Options:

A.

Ethernet headers.

B.

IP payload.

C.

IP headers.

D.

Port names.

Buy Now
Questions 16

What global configuration setting changes the behavior for content-inspected traffic while FortiGate is in system conserve mode?

Options:

A.

av-failopen

B.

mem-failopen

C.

utm-failopen

D.

ips-failopen

Buy Now
Questions 17

Examine the output from the ‘diagnose vpn tunnel list’ command shown in the exhibit; then answer the question below.

Which command can be used to sniffer the ESP traffic for the VPN DialUP_0?

Options:

A.

diagnose sniffer packet any ‘port 500’

B.

diagnose sniffer packet any ‘esp’

C.

diagnose sniffer packet any ‘host 10.0.10.10’

D.

diagnose sniffer packet any ‘port 4500’

Buy Now
Questions 18

Which real time debug should an administrator enable to troubleshoot RADIUS authentication problems?

Options:

A.

Diagnose debug application radius -1.

B.

Diagnose debug application fnbamd -1.

C.

Diagnose authd console –log enable.

D.

Diagnose radius console –log enable.

Buy Now
Status:
Expired , and Replaced By
Exam Code: NSE7_EFW-6.4
Exam Name: Fortinet NSE 7 - Enterprise Firewall 7.0
Last Update: Apr 14, 2023
Questions: 1
$66  $164.99
$50  $124.99
$42  $104.99
buy now NSE7_EFW-6.4