Fortinet NSE 7 - Enterprise Firewall 6.4 - NSE7

Question 1

View the IPS exit log, and then answer the question below.
# diagnose test application ipsmonitor 3
ipsengine exit log"
pid = 93 (cfg), duration = 5605322 (s) at Wed Apr 19 09:57:26 2017
code = 11, reason: manual
What is the status of IPS on this FortiGate?

A. All IPS-related features have been disabled in FortiGate's configuration.

B. IPS engine memory consumption has exceeded the model-specific predefined value.

C. There are communication problems between the IPS engine and the management database.

D. IPS daemon experienced a crash.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

Which real time debug should an administrator enable to troubleshoot RADIUS authentication problems?

A. Diagnose debug application radius -1.

B. Diagnose debug application fnbamd -1.

C. Diagnose authd console -log enable.

D. Diagnose radius console -log enable.

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

Which two tasks are automated using the Install Wizard on FortiManager? (Choose two.)

A. Installing configuration changes to managed devices

B. Previewing pending configuration changes for managed devices

C. Importing interface mappings from managed devices

D. Adding devices to FortiManager

Correct Answer: A,B

Question 4

Refer to the exhibit, which shows a session entry. Which statement about this session is true?

A. It is an ICMP session from 10.1.10.10 to 10.200.1.1.

B. It is a TCP session in the established state, from 10.1.10.10 to 10.200.5.1.

C. It is an ICMP session from 10.1.10.10 to 10.200.5. 1.

D. It is a TCP session in close_wait state, from 10. l. 10.10 to 10.200.1.1.

Correct Answer: C

Question 5

View the exhibit, which contains a session entry, and then answer the question below.

Which statement is correct regarding this session?

A. It is a TCP session in CLOSE_WAIT state from 10.1.10.10 to 10.200.1.1.

B. It is an ICMP session from 10.1.10.10 to 10.200.1.1.

C. It is an ICMP session from 10.1.10.10 to 10.200.5.1.

D. It is a TCP session in ESTABLISHED state from 10.1.10.10 to 10.200.5.1.

Correct Answer: C

Question 6

View the exhibit, which contains the output of a diagnose command, and then answer the question below.

What statements are correct regarding the output? (Choose two.)

A. Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next-hop IP address 10.0.1.10.

B. This is an expected session created by a session helper.

C. Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next-hop IP address 10.200.1.1.

D. This is an expected session created by an application control profile.

Correct Answer: B,C

Question 7

View these partial outputs from two routing debug commands:

Which outbound interface will FortiGate use to route web traffic from internal users to the Internet?

A. port2

B. port1

C. port3

D. Both port1 and port2

Correct Answer: B

Question 8

View the exhibit, which contains the output of a BGP debug command, and then answer the question below.

Which of the following statements about the exhibit are true? (Choose two.)

A. For the peer 10.125.0.60, the BGP state of is Established.

B. The local BGP peer has received a total of three BGP prefixes.

C. Since the BGP counters were last reset, the BGP peer 10.200.3.1 has never been down.

D. The local BGP peer has not established a TCP session to the BGP peer 10.200.3.1.

Correct Answer: A,D

Fortinet NSE 7 - Enterprise Firewall 6.4 - NSE7_EFW-6.4 Exam Practice Test

Latest Update

Useful Links

Contact Us