Fortinet NSE 7 - Secure Networking 7.6 Architect - NSE7_FSN_AR-7.6 Exam Practice Test

A. FortiGate found the requested URL in its local cache.

B. The requested URL belongs to category ID 255.

C. This web request was inspected using the ftgd-allow web filter profile.

D. The server hostname was extracted from the SNI in the client request, or from the CN in the server certificate.

A. The total slab size of the tcp_session slab is 7500 kB and is associated with the kernel.

B. The total slab size of the UDPv6 slab is 14080 kB and is associated with the user space.

C. The total slab size of the ip6_session slab is 1472 kB and is associated with the kernel.

D. The total slab size of the ip_session Tlab is 14080 kB and is associated with the user space.

A. To identify the user who created the event, they must view it on the Configuration and Installation widget on FortiGate at the FortiManager device layer.

B. To identify the user who created the event, in the FortiManager system logs, they must use the type=script filter in the user field.

C. The user script_manager, an API user from the Fortinet Developer Network (FDN), is retrieving a configuration.

D. The retrieve process was automatically triggered by a Remote FortiGate Directly (via CLI) script.

A. All of the neighbors displayed are part of a single BGP configuration on the local router with the neighbor-range set to a value of 4.

B. The router 100.64.3.1 needs to update the local AS number in its BGP configuration in order to bring up the 8GP session with the local router.

C. The BGP session with peer 10.127.0.75 is up.

D. An inbound route-map on local router is blocking the prefixes from neighbor 100.64.3.1.

A. The heartbeat messages can be seen in the collector agent logs.

B. The heartbeat messages must be manually enabled on FortiGate.

C. The heartbeat messages can be seen using the command diagnose debug authd fsso list.

D. The heartbeat messages can be seen on FortiGate using the real-lime FSSO debug.

A. The administrator must configure connected-route redistribution on FortiGate_C.

B. The administrator must configure the 100.64.2.0/24 network on FortiGate_C.

C. The administrator must configure BGP route redistribution on FortiGate_B.

D. The administrator must configure route-map-in on FortiGate_A.

A. proto_state=00 for an ICMP session.

B. proto_state=01 for a UDP session.

C. proto_state=05 for a TCP session.

D. proto_state=01 for a TCP session.

A. Overlay links provide routing flexibility.

B. A FortiLink interface is considered an underlay link.

C. Only wired connections can be used as underlay links.

D. A VLAN is a type of overlay link.

E. Wireless connections can be used to build overlay links.

A. The session information will not change unless the current route has been removed from the routing table.

B. Sessions involving port7 or port19 will not have their routing information flushed.

C. The session will be flagged as dirty but no route lookups will be performed.

D. Only the interface and gateway information for dev=7 will be removed.

A. IKE_Auth

B. Create_CHILD_SA

C. IKE_SA_NIT

D. IKE_Req_INIT

A. The TCP session has been successfully established.

B. The session was initiated from an authenticated user.

C. The session is being inspected using flow inspection.

D. The session is being offloaded.

A. FortiGate starts taking the configured action for new sessions requiring content inspection when the system memory reaches the configured red threshold.

B. FortiGate starts dropping all new sessions when the system memory reaches the configured red threshold.

C. FortiGate enters conserve mode when the system memory reaches the configured extreme threshold.

D. FortiGate exits conserve mode when the system memory goes below the configured green threshold.