NSE7_EFW-6.0 Online Practice Questions and Answers

View the central management configuration shown in the exhibit, and then answer the question below.

Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?

A. 10.0.1.244

B. Public FortiGuard servers

C. 10.0.1.240

D. 10.0.1.242

Which of the following tasks are automated using the Install Wizard on FortiManager? (Choose two.)

A. Install configuration changes to managed devices.

B. Preview pending configuration changes for managed devices.

C. Import policy packages from managed devices.

D. Add devices to FortiManager.

E. Import interface mappings from managed devices

View the global IPS configuration, and then answer the question below.

Which of the following statements is true regarding this configuration? (Choose two.)

A. IPS will scan every byte in every session.

B. IPS acceleration is disabled in this FortiGate device's configuration.

C. New packets requiring IPS inspection will be passed through during conserve mode.

D. FortiGate will spawn IPS engine instances based on the system load.

View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.

Why didn't the tunnel come up?

A. The remote gateway is using aggressive mode and the local gateway is configured to use main mode.

B. The remote gateway's phase 1 configuration does not match the local gateway's phase 1 configuration.

C. The remote gateway's phase 2 configuration does not match the local gateway's phase 2 configuration

D. The pre-shared keys do not match.

What conditions are required for two FortiGate devices to form an OSPF adjacency? (Choose three.)

A. OSPF IP MTUs match.

B. OSPF costs match.

C. OSPF peer IDs match.

D. IP addresses are in the same subnet.

E. Hello and dead intervals match.

An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator noticed that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link-failed-signal to fix the problem. Which one of the following statements about this command is true?

A. Forces the former primary device to shut down all its non-heartbeat interfaces for one second while the failover occurs.

B. Sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.

C. Disables all the non-heartbeat interfaces in all the HA members for two seconds after a failover.

D. Sends a link failed signal to all connected devices.

View the exhibit, which contains the output of diagnose sys session stat, and then answer the question below.

Which of the following statements about the output shown are correct? (Choose two.)

A. There are 166 TCP sessions waiting to complete the three-way handshake.

B. All the sessions in the session table are TCP sessions.

C. There are 0 ephemeral sessions.

D. No sessions have been deleted because of memory pages exhaustion.

What does the dirty flag mean in a FortiGate session?

A. The session must be removed from the former primary unit after an HA failover.

B. Traffic has been identified as from an application that is not allowed.

C. The next packet must be re-evaluated against the firewall policies.

D. Traffic has been blocked by the antivirus inspection.

Which of the following statements about bulk configuration changes using FortiManager CLI scripts are correct? (Choose two.)

A. When executed on the All FortiGate in ADOM, changes are automatically installed without creating a new revision history.

B. When executed on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.

C. When executed on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate.

D. When executed on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate.

Which of the following statements are correct regarding application layer test commands? (Choose two.)

A. Some of them display statistics and configuration information about a feature or process.

B. They are used to filter real-time debugs.

C. They display real-time application debugs.

D. Some of them can be used to restart an application.