NSE7_EFW-6.4 by Fortinet Actual Free Exam Questions And Answers

Question 1

Examine the output of the 'get router info bgp summary' command shown in the exhibit; then answer the question below.

Which statement can explain why the state of the remote BGP peer 10.200.3.1 is Connect?

A. The local peer has received the BGP prefixed from the remote peer.

B. The local peer is receiving the BGP keepalives from the remote peer but it has not received any BGP prefix yet.

C. The local peer is receiving the BGP keepalives from the remote peer but it has not received the OpenConfirm yet.

D. The TCP session for the BGP connection to 10.200.3.1 is down.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 2

How does FortiManager handle FortiGuard requests from FortiGate devices, when it is configured as a local FDS?

A. FortiManager can download and maintain local copies of FortiGuard databases.

B. FortiManager supports only FortiGuard push to managed devices.

C. FortiManager does not support rating requests.

D. FortiManager will respond to update requests only if they originate from a managed device.

Discussion 0

Correct Answer: A Vote an answer

Question 3

Which two statements about FortiManager is true when it is deployed as a local FDS? (Choose two.)

A. It supports rating requests from both managed and unmanaged devices.

B. It provides VM license validation services.

C. It can be configured as an update server, or a rating server, but not both.

D. It caches available firmware updates for unmanaged devices.

Discussion 0

Correct Answer: A,B Vote an answer

Question 4

A FortiGate's portl is connected to a private network. Its port2 is connected to the Internet. Explicit web proxy is enabled in port1 and only explicit web proxy users can access the Internet. Web cache is NOT enabled. An internal web proxy user is downloading a file from the Internet via HTTP. Which statements are true regarding the two entries in the FortiGate session table related with this traffic? (Choose two.)

A. One session has the proxy flag on, the other one does not.

B. One of the sessions has the IP address of port2 as the source IP address.

C. The destination IP addresses of both sessions are IP addresses assigned to FortiGate's interfaces.

D. Both session have the local flag on.

Discussion 0

Correct Answer: B,D Vote an answer

Question 5

Which statement about the designated router (DR) and backup designated router (BDR) in an OSPF multi-access network is true?

A. Non-DR and non-BDR routers will form full adjacencies to DR and BDR only.

B. Only the DR receives link state information from non-DR routers.

C. FortiGate first checks the OSPF ID to elect a DR.

D. BDR is responsible for forwarding link state information from one router to another.

Discussion 0

Correct Answer: A Vote an answer

Question 6

View the following FortiGate configuration.

All traffic to the Internet currently egresses from port1. The exhibit shows partial session information for Internet traffic from a user on the internal network:

If the priority on route ID 1 were changed from 5 to 20, what would happen to traffic matching that user's session?

A. The session would remain in the session table, but its traffic would now egress from both port1 and port2.

B. The session would be deleted, so the client would need to start a new session.

C. The session would remain in the session table, and its traffic would start to egress from port2.

D. The session would remain in the session table, and its traffic would still egress from port1.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 7

What events are recorded in the crashlogs of a FortiGate device? (Choose two.)

A. System entering to and leaving from the proxy conserve mode.

B. Configuration changes.

C. Changes in the status of any of the FortiGuard licenses.

D. A process crash.

Discussion 0

Correct Answer: A,D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 8

Refer to the exhibit, which contains the output of a BGP debug command.

Which statement about the exhibit is true?

A. The local router BGP state is OpenConfirm with the 10.127.0.75 peer.

B. The local router has not established a TCP session with 100.64.3.1.

C. Since the counters were last reset, the 10.200.3.1 peer has never been down.

D. The local router has received a total of three BGP prefixes from all peers.

Discussion 0

Correct Answer: B Vote an answer

Question 9

Refer to the exhibit, which shows a session entry. Which statement about this session is true?

A. It is a TCP session in close_wait state, from 10. l. 10.10 to 10.200.1.1.

B. It is a TCP session in the established state, from 10.1.10.10 to 10.200.5.1.

C. It is an ICMP session from 10.1.10.10 to 10.200.1.1.

D. It is an ICMP session from 10.1.10.10 to 10.200.5. 1.

Discussion 0

Correct Answer: D Vote an answer

Question 10

Refer to exhibit, which contains the output of a BGP debug command.

Which statement explains why the state of the 10.200.3.1 peer is Connect?

A. The local router is receiving BGP keepalives from the remote peer, but the local peer has not received the OpenConfirm yet.

B. The local router is receiving the BGP keepalives from the peer, but it has not received a BGP prefix yet.

C. The TCP session to 10.200.3.1 has not completed the three-way handshake.

D. The local router has received the BGP prefixes from the remote peer.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Fortinet NSE 7 - Enterprise Firewall 6.4 - NSE7_EFW-6.4 Exam Practice Test

Contact Us

Useful Links

Latest Updated