NSE7_EFW-6.4 Online Practice Questions and Answers

Refer to the exhibit, which shows a FortiGate configuration.

An administrator is troubleshooting a web filter issue on FortiGate. The administrator has configured a web filter profile and applied it to a policy; however, the web filter is not inspecting any traffic that is passing through the policy.

What must the administrator change to fix the issue?

A. The administrator must increase webfilter-timeout.

B. The administrator must disable webfilter-force-off.

C. The administrator must change protocol to TCP.

D. The administrator must enable fortiguard-anycast.

Which two statements about the Security Fabric are true? (Choose two.)

A. Only the root FortiGate collects network information and forwards it to FortiAnalyzer.

B. FortiGate uses FortiTelemetry protocol to communicate with FortiAnalyzer.

C. All FortiGate devices in the Security Fabric must have bidirectional FortiTelemetry connectivity.

D. Branch FortiGate devices must be configured first.

An administrator has configured the following CLI script on FortiManager, which failed to apply any changes to the managed device after being executed.

Why didn't the script make any changes to the managed device?

A. Commands that start with the # sign are not executed.

B. CLI scripts will add objects only if they are referenced by policies.

C. Incomplete commands are ignored in CLI scripts.

D. Static routes can only be added using TCL scripts.

Refer to the exhibit, which contains the output of diagnose sys session list.

If the HA ID for the primary unit is zero (0), which statement about the output is true?

A. This session cannot be synced with the slave unit.

B. The inspection of this session has been offloaded to the slave unit.

C. The master unit is processing this traffic.

D. This session is for HA heartbeat traffic.

Examine the output of the `get router info ospf neighbor' command shown in the exhibit; then answer the question below.

Refer to the exhibit, which shows the output of a debug command.

Which statement about the output is true?

A. TheOSPF routers with the IDs 0.0.0.69 and 0.0.0.117 are both designated routers for the war. l network.

B. The OSPF router with the ID 0.0.0.2 is the designated router for the ToRemote network.

C. The local FortiGate is the designated router for the wan1 network.

D. The interface ToRemote is a point-to-point OSPF network.

View the exhibit, which contains the output of a web diagnose command, and then answer the question below.

Which one of the following statements explains why the cache statistics are all zeros?

A. The administrator has reallocated the cache memory to a separate process.

B. There are no users making web requests.

C. The FortiGuard web filter cache is disabled in the FortiGate's configuration.

D. FortiGate is using a flow-based web filter and the cache applies only to proxy-based inspection.

What global configuration setting changes the behavior for content-inspected traffic while FortiGate is in system conserve mode?

A. av-failopen

B. mem-failopen

C. utm-failopen

D. ips-failopen

View the exhibit, which contains a partial output of an IKE real-time debug, and then answer the question below.

Based on the debug output, which phase-1 setting is enabled in the configuration of this VPN?

A. auto-discovery-sender

B. auto-discovery-forwarder

C. auto-discovery-shortcut

D. auto-discovery-receiver

Which two statements about an auxiliary session are true? (Choose two.)

A. With the auxiliary session setting enabled, ECMP traffic is accelerated to the NP6 processor.

B. With the auxiliary session setting enabled, two sessions will be created in case of routing change.

C. With the auxiliary session setting disabled, for each traffic path, FortiGate will use the same auxiliary session.

D. With the auxiliary session disabled, only auxiliary sessions will be offloaded.

Which two conditions must be met for a statistic route to be active in the routing table? (Choose two.)

A. The link health monitor (if configured) is up.

B. There is no other route, to the same destination, with a higher distance.

C. The outgoing interface is up.

D. The next-hop IP address is up.