Download Fortinet NSE 7 -Enterprise Firewall 6-0.prep4sure.NSE7_EFW-6.0.2019-12-04.1e.18q.vcex
Download ExamFile Info
| Exam | Fortinet NSE 7 - Enterprise Firewall 6.0 |
| Number | NSE7_EFW-6.0 |
| File Name | Fortinet NSE 7 -Enterprise Firewall 6-0.prep4sure.NSE7_EFW-6.0.2019-12-04.1e.18q.vcex |
| Size | 2.53 Mb |
| Posted | December 04, 2019 |
| Downloads | 66 |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Discount: 20%
Demo Questions
Question 1
View the exhibit, which contains the output of diagnose sys session list, and then answer the question below.
If the HA ID for the primary unit is zero (0), which one of the following statements about the output is true?
If the HA ID for the primary unit is zero (0), which one of the following statements about the output is true?
- A: This session is for HA heartbeat traffic.
- B: This session cannot be synced with the slave unit.
- C: The master unit is processing this traffic.
- D: The inspection of this session has been offloaded to the slave unit.
Question 2
Which of the following tasks are automated using the Install Wizard on FortiManager? (Choose two.)
- A: Install configuration changes to managed devices.
- B: Preview pending configuration changes for managed devices.
- C: Import policy packages from managed devices.
- D: Add devices to FortiManager.
- E: Import interface mappings from managed devices
Question 3
View the exhibit, which contains a session table entry, and then answer the question below.
Which one of the following statements is true regarding FortiGates's inspection of this session?
Which one of the following statements is true regarding FortiGates's inspection of this session?
- A: FortiGate applied flow-based inspection.
- B: FortiGate applied proxy-based inspection.
- C: FortiGate forwarded this session without any inspection.
- D: FortiGate applied NGFW flow-based inspection.
Question 4
View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.
Why didn't the tunnel come up?
Why didn't the tunnel come up?
- A: The remote gateway is using aggressive mode and the local gateway is configured to use main mode.
- B: The remote gateway's phase 1 configuration does not match the local gateway's phase 1 configuration.
- C: The remote gateway's phase 2 configuration does not match the local gateway's phase 2 configuration
- D: The pre-shared keys do not match.
Question 5
View the exhibit, which contains the output of a web filtering diagnose command, and then answer the question below.
Which one of the following statements explains why the cache statistics are all zeros?
Which one of the following statements explains why the cache statistics are all zeros?
- A: There are no users making web requests.
- B: The administrator has reallocated the cache memory to a separate process.
- C: The FortiGuard web filter cache is disabled in the FortiGate's configuration.
- D: FortiGate is using flow-based inspection which doesn't use the cache.
Question 6
View the exhibit, which contains the output of a debug command, and then answer the question below.
Which one of the following statements about this FortiGate is correct?
Which one of the following statements about this FortiGate is correct?
- A: It is currently in system conserve mode because of high CPU usage.
- B: It is currently in extreme conserve mode because of high memory usage.
- C: It is currently in proxy conserve mode because of high memory usage.
- D: It is currently in memory conserve mode because of high memory usage.
Question 7
What conditions are required for two FortiGate devices to form an OSPF adjacency? (Choose three.)
- A: OSPF IP MTUs match.
- B: OSPF costs match.
- C: OSPF peer IDs match.
- D: IP addresses are in the same subnet.
- E: Hello and dead intervals match.
Question 8
An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator noticed that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link-failed-signal to fix the problem. Which one of the following statements about this command is true?
- A: Forces the former primary device to shut down all its non-heartbeat interfaces for one second while the failover occurs.
- B: Sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.
- C: Disables all the non-heartbeat interfaces in all the HA members for two seconds after a failover.
- D: Sends a link failed signal to all connected devices.
Question 9
View the exhibit, which contains the output of a real-time debug, and then answer the question below.
Which of the following statements are true regarding this output (Choose two.)
Which of the following statements are true regarding this output (Choose two.)
- A: This web request was inspected using the root web filter profile.
- B: The requested URL belongs to category ID 52.
- C: The web request was blocked by FortiGate.
- D: FortiGate found the requested URL in its local cache.
Question 10
View the exhibit, which contains the output of diagnose sys session stat, and then answer the question below.
Which of the following statements about the output shown are correct? (Choose two.)
Which of the following statements about the output shown are correct? (Choose two.)
- A: There are 166 TCP sessions waiting to complete the three-way handshake.
- B: All the sessions in the session table are TCP sessions.
- C: There are 0 ephemeral sessions.
- D: No sessions have been deleted because of memory pages exhaustion.
HOW TO OPEN VCEX AND EXAM FILES
Use ProfExam Simulator to open VCEX and EXAM files
HOW TO OPEN VCE FILES
Use VCE Exam Simulator to open VCE files
