NSE7_EFW-6.2 by Fortinet Actual Free Exam Q&As

Question 1

View the exhibit, which contains the partial output of a diagnose command, and then answer the question below.

Based on the output, which of the following statements is correct?

A. Quick mode selectors are disabled. B. Anti-reply is enabled. C. Remote gateway IP is 10.200.5.1. D. DPD is disabled.

Discussion 0

Correct Answer: B Vote an answer

Question 2

View the exhibit, which contains the output of a diagnose command, and then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

A. FortiGate will probe 121.111.236.179 every fifteen minutes for a response. B. Servers with the D flag are considered to be down. C. FortiGate used 209.222.147.3 as the initial server to validate its contract. D. Servers with a negative TZ value are experiencing a service outage.

Discussion 0

Correct Answer: A,C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 3

Which statements about bulk configuration changes using FortiManager CLI scripts are correct? (Choose two.)

A. When executed on the All FortiGate in ADOM, changes are automatically installed without creating a new revision history. B. When executed on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation. C. When executed on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate. D. When executed on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate.

Discussion 0

Correct Answer: B,D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 4

Examine the IPsec configuration shown in the exhibit; then answer the question below.

An administrator wants to monitor the VPN by enabling the IKE real time debug using these commands:
diagnose vpn ike log-filter src-addr4 10.0.10.1
diagnose debug application ike -1
diagnose debug enable
The VPN is currently up, there is no traffic crossing the tunnel and DPD packets are being interchanged between both IPsec gateways. However, the IKE real time debug does NOT show any output. Why isn't there any output?

A. The IKE real time debug shows error messages only. If it does not provide any output, it indicates that the tunnel is operating normally. B. The IKE real time debug shows the phase 1 negotiation only. For information after that, the administrator must use the IPsec real time debug instead: diagnose debug application ipsec -1. C. The IKE real time shows the phases 1 and 2 negotiations only. It does not show any more output once the tunnel is up. D. The log-filter setting is set incorrectly. The VPN's traffic does not match this filter.

Discussion 0

Correct Answer: D Vote an answer

Question 5

The logs in a FSSO collector agent (CA) are showing the following error:
failed to connect to registry: PIKA1026 (192.168.12.232)
What can be the reason for this error?

A. The CA cannot reach the FortiGate with the IP address 192.168.12.232. B. The CA cannot resolve the name of the workstation. C. The remote registry service is not running in the workstation 192.168.12.232. D. The FortiGate cannot resolve the name of the workstation.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 6

How does FortiManager handle FortiGuard requests from FortiGate devices, when it is configured as a local FDS?

A. FortiManager does not support rating requests. B. FortiManager can download and maintain local copies of FortiGuard databases. C. FortiManager supports only FortiGuard push to managed devices. D. FortiManager will respond to update requests only if they originate from a managed device.

Discussion 0

Correct Answer: B Vote an answer

Question 7

View the central management configuration shown in the exhibit, and then answer the question below.

Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?

A. 10.0.1.242 B. 10.0.1.240 C. One of the public FortiGuard distribution servers D. 10.0.1.244

Discussion 0

Correct Answer: C Vote an answer

Question 8

Refer to the exhibit, which contains the output of get system ha status.
Which two statements about the output are true? (Choose two.)

A. Master is selected based on the priority configured under config system ha. B. The slave configuration is synchronized with the master. C. The HA management IP is 169.254.0.2. D. port7 is used as the HA heartbeat on all devices in the cluster.

Discussion 0

Correct Answer: A,D Vote an answer

Fortinet NSE 7 - Enterprise Firewall 6.2 - NSE7_EFW-6.2 Exam Practice Test