Fortinet NSE 7 - Enterprise Firewall 6.2 (NSE7_EFW-6.2) Free Practice Test

Question 1

View the exhibit, which contains the output of a debug command, and then answer the question below.

Which of the following statements about the exhibit are true? (Choose two.)

A. The local FortiGate has been elected as the OSPF backup designated router.

B. Port4 is connected to the OSPF backbone area.

C. In the network on port4, two OSPF routers are down.

D. The local FortiGate's OSPF router ID is 0.0.0.4

Correct Answer: B,D

Question 2

View the following FortiGate configuration.

All traffic to the Internet currently egresses from port1. The exhibit shows partial session information for Internet traffic from a user on the internal network:

If the priority on route ID 1 were changed from 5 to 20, what would happen to traffic matching that user's session?

A. The session would remain in the session table, and its traffic would still egress from port1.

B. The session would remain in the session table, and its traffic would start to egress from port2.

C. The session would remain in the session table, but its traffic would now egress from both port1 and port2.

D. The session would be deleted, so the client would need to start a new session.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

View the exhibit, which contains the output of a diagnose command, and the answer the question below.

Which statements are true regarding the Weight value?

A. It determines which FortiGuard server is used for license validation.

B. Its value is incremented with each packet lost.

C. Its initial value is statically set to 10.

D. Its initial value is calculated based on the round trip delay (RTT).

Correct Answer: B

Question 4

Which of the following statements are true regarding the SIP session helper and the SIP application layer gateway (ALG)? (Choose three.)

A. SIP session helper runs in the kernel; SIP ALG runs as a user space process.

B. SIP ALG can create expected sessions for media traffic; SIP helper does not.

C. SIP ALG supports SIP over IPv6; SIP helper does not.

D. SIP helper supports SIP over TCP and UDP; SIP ALG supports only SIP over UDP.

E. SIP ALG supports SIP HA failover; SIP helper does not.

Correct Answer: B,C,E

Question 5

View the exhibit, which contains a partial routing table, and then answer the question below.

Assuming all the appropriate firewall policies are configured, which of the following pings will FortiGate route? (Choose two.)

A. Source IP address 10.73.9.10, Destination IP address 10.72.3.15.

B. Source IP address 10.72.3.52, Destination IP address 10.1.0.254.

C. Source IP address 10.1.0.24, Destination IP address 10.72.3.20.

D. Source IP address 10.72.3.27, Destination IP address 10.1.0.52.

Correct Answer: B,D

Question 6

Which statement about memory conserve mode is true?

A. A FortiGate exits conserve mode when the configured memory use threshold reaches yellow.

B. A FortiGate starts dropping all the new and old sessions when the configured memory use threshold reaches extreme.

C. A FortiGate starts dropping new sessions when the configured memory use threshold reaches red

D. A FortiGate enters conserve mode when the configured memory use threshold reaches red

Correct Answer: C

Question 7

View the exhibit, which contains the output of a web diagnose command, and then answer the question below.

Which one of the following statements explains why the cache statistics are all zeros?

A. The administrator has reallocated the cache memory to a separate process.

B. FortiGate is using a flow-based web filter and the cache applies only to proxy-based inspection.

C. There are no users making web requests.

D. The FortiGuard web filter cache is disabled in the FortiGate's configuration.

Correct Answer: D

Question 8

Refer to exhibit, which contains the output of a BGP debug command.

Which statement explains why the state of the 10.200.3.1 peer is Connect?

A. The TCP session to 10.200.3.1 has not completed the 3-way handshake.

B. The local router is receiving the BGP keepalives from the peer, but it has not received a BGP prefix yet.

C. The local router is receiving BGP keepalives from the remote peer, but the local peer has not received the OpenConfirm yet.

D. The local router has received the BGP prefixes from the remote peer.
BGP neighbor states and how they change: * Idle: Initial state * Connect: Waiting for a successful three-way TCP connection * Active: Unable to establish the TCP session * OpenSent: Waiting for an OPEN message from the peer * OpenConfirm: Waiting for the keepalive message from the peer * Established: Peers have successfully exchanged OPEN and keepalive messages

Correct Answer: A

Welcome to TestSimulate

Fortinet NSE 7 - Enterprise Firewall 6.2 (NSE7_EFW-6.2) Free Practice Test