Fortinet NSE7_EFW-6.0 Exam Questions & Answers

View the exhibit, which contains the output of a real-time debug, and then answer the question below.

Which of the following statements are true regarding this output (Choose two.)

A. This web request was inspected using the root web filter profile.

B. The requested URL belongs to category ID 52.

C. The web request was blocked by FortiGate.

D. FortiGate found the requested URL in its local cache.

What is the purpose of an internal segmentation firewall (ISFW)?

A. It is the first line of defense at the network perimeter.

B. It inspects incoming traffic to protect services in the corporate DMZ.

C. It is an all-in-one security appliance that is placed at remote sites to extend the enterprise network.

D. It splits the network into multiple security segments to minimize the impact of breaches.

View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.

Which of the following statements about this debug output are correct? (Choose two.)

A. It shows a phase 1 negotiation.

B. The initiator has provided remote as its IPsec peer ID.

C. The negotiation is using AES128 encryption with CBC hash.

D. The remote gateway IP address is 10.0.0.1.