NSE7_EFW-6.4 Dumps PDF New [2022] Ultimate Study Guide [Q45-Q68] – Unlimited Lifetime Access Free Exams PDF

Q45. View the exhibit, which contains the output of a diagnose command, and the answer the question below.

Which statements are true regarding the Weight value?

Its initial value is calculated based on the round trip delay (RTT).

Its initial value is statically set to 10.

Its value is incremented with each packet lost.

It determines which FortiGuard server is used for license validation.

Q46. View the exhibit, which contains an entry in the session table, and then answer the question below.

Which one of the following statements is true regarding FortiGate’s inspection of this session?

FortiGate applied proxy-based inspection.

FortiGate forwarded this session without any inspection.

FortiGate applied flow-based inspection.

FortiGate applied explicit proxy-based inspection.

Q47. Examine the output from the ‘diagnose vpn tunnel list’ command shown in the exhibit; then answer the question below.

Which command can be used to sniffer the ESP traffic for the VPN DialUP_0?

diagnose sniffer packet any ‘port 500’

diagnose sniffer packet any ‘esp’

diagnose sniffer packet any ‘host 10.0.10.10’

diagnose sniffer packet any ‘port 4500’

Q48. View the exhibit, which contains a partial routing table, and then answer the question below.

Assuming all the appropriate firewall policies are configured, which of the following pings will FortiGate route? (Choose two.)

Source IP address 10.1.0.24, Destination IP address 10.72.3.20.

Source IP address 10.72.3.27, Destination IP address 10.1.0.52.

Source IP address 10.72.3.52, Destination IP address 10.1.0.254.

Source IP address 10.73.9.10, Destination IP address 10.72.3.15.

Q49. View the exhibit, which contains the output of get sys ha status, and then answer the question below.

Which statements are correct regarding the output? (Choose two.)

The slave configuration is not synchronized with the master.

The HA management IP is 169.254.0.2.

Master is selected because it is the only device in the cluster.

port 7 is used the HA heartbeat on all devices in the cluster.

Q50. Two independent FortiGate HA clusters are connected to the same broadcast domain. The administrator has reported that both clusters are using the same HA virtual MAC address. This creates a duplicated MAC address problem in the network. What HA setting must be changed in one of the HA clusters to fix the problem?

Group ID.

Group name.

Session pickup.

Gratuitous ARPs.

Q51. Refer to the exhibit, which contains the debug output of diagnose dvm device list.

Which two statements about the output shown in the exhibit are correct? (Choose two.)

ADOMs are disabled on the FortiManager

The FortiGate configuration is in sync with latest running revision history.

There are pending device-level changes yet to be installed on Local-FortiGate.

The policy package has been modified for Local-FortiGate.

Q52. Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.)

IPS failopen

mem failopen

AV failopen

UTM failopen

Q53. Which the following events can trigger the election of a new primary unit in a HA cluster? (Choose two.)

Primary unit stops sending HA heartbeat

The FortiGuard license for the primary unit is updated.

One of the monitored interfaces in the primary unit is disconnected.

A secondary unit is removed from the HA cluster.

Q54. A corporate network allows Internet Access to FSSO users only. The FSSO user student does not have Internet access after successfully logged into the Windows AD network. The output of the ‘diagnose debug authd fsso list’ command does not show student as an active FSSO user. Other FSSO users can access the Internet without problems. What should the administrator check? (Choose two.)

The user student must not be listed in the CA’s ignore user list.

The user student must belong to one or more of the monitored user groups.

The student workstation’s IP subnet must be listed in the CA’s trusted list.

At least one of thestudent’s user groups must be allowed by a FortiGate firewall policy.

Q55. Which two conditions must be met for a statistic route to be active in the routing table? (Choose two.)

The link health monitor (if configured) is up.

There is no other route, to the same destination, with a higherdistance.

The outgoing interface is up.

The next-hop IP address is up.

Q56. An administrator is running the following sniffer in a FortiGate:
diagnose sniffer packet any “host 10.0.2.10” 2
What information is included in the output of the sniffer? (Choose two.)

Ethernet headers.

IP payload.

IP headers.

Port names.

Q57. What conditions are required for two FortiGate devices to form an OSPF adjacency? (Choose three.)

IP addressesare in the same subnet.

Hello and dead intervals match.

OSPF IP MTUs match.

OSPF peer IDs match.

OSPF costs match.

Q58. Examine the output of the ‘get router info ospf neighbor’ command shown in the exhibit; then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

The interface ToRemote is OSPF network type point-to-point.

The OSPF router with the ID 0.0.0.2 is the designated router for the ToRemote network.

The local FortiGate is the backup designated router for the wan1 network.

The OSPF routers with the IDs 0.0.0.69 and 0.0.0.117 are both designated routers for the wan1 network.

Q59. An administrator has configured a dial-up IPsec VPN with one phase 2, extended authentication (XAuth) and IKE mode configuration. The administrator has also enabled the IKE real time debug:
diagnose debug application ike-1
diagnose debug enable
In which order is each step and phase displayed in the debug output each time a new dial-up user is connecting to the VPN?

Phase1; IKE mode configuration; XAuth; phase 2.

Phase1; XAuth; IKE mode configuration; phase2.

Phase1; XAuth; phase 2; IKE mode configuration.

Phase1; IKE mode configuration; phase 2; XAuth.

Q60. View the exhibit, which contains the output of a debug command, and then answer the question below.

Which of the following statements about the exhibit are true? (Choose two.)

In the network on port4, two OSPF routers are down.

Port4 is connected to the OSPF backbone area.

The local FortiGate’s OSPF router ID is 0.0.0.4

The local FortiGate has been elected as the OSPF backup designated router.

Q61. Refer to the exhibit, which contains partial outputs from two routing debug commands.

Why is the port2 default route not in the second command’s output?

It has a higher priority value than the default route using port1.

It is disabled in the FortiGate configuration.

It has a lower priority value than the default route using port1.

It has a higher distance than the default route using port1.

Q62. Which of the following statements is true regarding a FortiGate configured as an explicit web proxy?

FortiGate limits the number of simultaneous sessions per explicit web proxy user. This limit CANNOT be modified by the administrator.

FortiGate limits the total number of simultaneous explicit web proxy users.

FortiGate limits the number of simultaneous sessions per explicit web proxy user The limit CAN be modified by the administrator

FortiGate limits the number of workstations that authenticate using the same web proxy user credentials. This limit CANNOT be modified by the administrator.

Q63. What is the purpose of an internal segmentation firewall (ISFW)?

It inspects incoming traffic to protect services in the corporate DMZ.

It is the first line of defense at the network perimeter.

It splits the network into multiple security segments to minimize the impact of breaches.

It is anall-in-one security appliance that is placed at remote sites to extend the enterprise network.

Q64. An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage. However, after the changes, one network application started to have problems. During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before the arrival of the SYN/ACKs. When the SYN/ACK packets arrive to the FortiGate, the unit has already deleted the respective sessions. Which TCP session timer must be increased to fix this problem?

TCP half open.

TCP half close.

TCP time wait.

TCP session time to live.

Q65. Examine the output of the ‘get router info bgp summary’ command shown in the exhibit; then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

BGP state of the peer 10.125.0.60 is Established.

BGP peer 10.200.3.1 has never beendown since the BGP counters were cleared.

Local BGP peer has not received an OpenConfirm from 10.200.3.1.

The local BGP peer has received a total of 3 BGP prefixes.

Q66. Refer to the exhibit, which contains the output of get system ha status.
Which two statements about the output are true? (Choose two.)

The slave configuration is synchronized with the master.

port7 is used as the HA heartbeat on all devices in the cluster.

Master is selected based on the priority configured under config system ha.

The HA management IP is 169.254.0.2.

Q67. View the exhibit, which contains the output of a diagnose command, and then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

FortiGate will probe 121.111.236.179 every fifteen minutes for a response.

Servers with the D flag are considered to be down.

Servers with a negative TZ value are experiencing a service outage.

FortiGate used 209.222.147.3 as the initial server to validate its contract.

Q68. A FortiGate is configured as an explicit web proxy. Clients using this web proxy are reposting DNS errors when accessing any website. The administrator executes the following debug commands and observes that the n-dns-timeout counter is increasing:

What should the administrator check to fix the problem?