NSE7_EFW-6.2 by Fortinet Actual Free Exam Questions And Answers

Question 1

View the IPS exit log, and then answer the question below.
# diagnose test application ipsmonitor 3
ipsengine exit log"
pid = 93 (cfg), duration = 5605322 (s) at Wed Apr 19 09:57:26 2017
code = 11, reason: manual
What is the status of IPS on this FortiGate?

A. All IPS-related features have been disabled in FortiGate's configuration.

B. There are communication problems between the IPS engine and the management database.

C. IPS engine memory consumption has exceeded the model-specific predefined value.

D. IPS daemon experienced a crash.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 2

View the exhibit, which contains the output of a debug command, and then answer the question below.

Which one of the following statements about this FortiGate is correct?

A. It is currently in proxy conserve mode because of high memory usage.

B. It is currently in system conserve mode because of high CPU usage.

C. It is currently in extreme conserve mode because of high memory usage.

D. It is currently in memory conserve mode because of high memory usage.

Discussion 0

Correct Answer: D Vote an answer

Question 3

View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.

Which statements about this debug output are correct? (Choose two.)

A. The remote gateway IP address is 10.0.0.1.

B. The initiator has provided remote as its IPsec peer ID.

C. The negotiation is using AES128 encryption with CBC hash.

D. It shows a phase 1 negotiation.

Discussion 0

Correct Answer: B,D Vote an answer

Question 4

Examine the following partial outputs from two routing debug commands; then answer the question below:

Why the default route using port2 is not displayed in the output of the second command?

A. It has a higher distance than the default route using port1.

B. It has a higher priority than the default route using port1.

C. It is disabled in the FortiGate configuration.

D. It has a lower priority than the default route using port1.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 5

View the exhibit, which contains the output of a diagnose command, and then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

A. FortiGate will probe 121.111.236.179 every fifteen minutes for a response.

B. FortiGate used 209.222.147.3 as the initial server to validate its contract.

C. Servers with the D flag are considered to be down.

D. Servers with a negative TZ value are experiencing a service outage.

Discussion 0

Correct Answer: A,B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 6

Which the following events can trigger the election of a new primary unit in a HA cluster? (Choose two.)

A. A secondary unit is removed from the HA cluster.

B. The FortiGuard license for the primary unit is updated.

C. One of the monitored interfaces in the primary unit is disconnected.

D. Primary unit stops sending HA heartbeat keepalives.

Discussion 0

Correct Answer: C,D Vote an answer

Question 7

Two independent FortiGate HA clusters are connected to the same broadcast domain. The administrator has reported that both clusters are using the same HA virtual MAC address. This creates a duplicated MAC address problem in the network. What HA setting must be changed in one of the HA clusters to fix the problem?

A. Group name.

B. Gratuitous ARPs.

C. Group ID.

D. Session pickup.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Fortinet NSE 7 - Enterprise Firewall 6.2 - NSE7_EFW-6.2 Exam Practice Test

Contact Us

Useful Links

Latest Updated