Fortinet NSE7 Enterprise Firewall - FortiOS 5.4 - NSE7 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

The CLI command set intelligent-mode <enable | disable> controls the IPS engine's adaptive scanning behavior. Which of the following statements describes IPS adaptive scanning?

A. Downloads signatures on demand from FDS based on scanning requirements. B. Determines when it is secure enough to stop scanning session traffic. C. Determines the optimal number of IPS engines required based on system load. D. Choose a matching algorithm based on available memory and the type of inspection being performed.

Discussion 0

Correct Answer: D Vote an answer

Question 2

A FortiGate's portl is connected to a private network. Its port2 is connected to the Internet. Explicit web proxy is enabled in port1 and only explicit web proxy users can access the Internet. Web cache is NOT enabled. An internal web proxy user is downloading a file from the Internet via HTTP. Which statements are true regarding the two entries in the FortiGate session table related with this traffic? (Choose two.)

A. The destination IP addresses of both sessions are IP addresses assigned to FortiGate's interfaces. B. One of the sessions has the IP address of port2 as the source IP address. C. Both session have the local flag on. D. One session has the proxy flag on, the other one does not.

Discussion 0

Correct Answer: B,C Vote an answer

Question 3

A FortiGate device has the following LDAP configuration:

The LDAP user student cannot authenticate. The exhibit shows the output of the authentication real time debug while testing the student account:

Based on the above output, what FortiGate LDAP settings must the administer check? (Choose two.)

A. cnid. B. dn. C. password. D. username.

Discussion 0

Correct Answer: C,D Vote an answer

Question 4

A FortiGate is configured as an explicit web proxy. Clients using this web proxy are reposting DNS errors when accessing any website. The administrator executes the following debug commands and observes that the n-dns-timeout counter is increasing:

What should the administrator check to fix the problem?

A. That DNS service is enabled in the explicit web proxy interface. B. The connectivity between the client workstations and the DNS server. C. That DNS traffic from client workstations is allowed by the explicit web proxy policies. D. The connectivity between the FortiGate unit and the DNS server.

Discussion 0

Correct Answer: B,D Vote an answer

Question 5

View the exhibit, which contains the output of a real-time debug, and then answer the question below.

Which of the following statements is true regarding this output? (Choose two.)

A. FortiGate found the requested URL in its local cache. B. The web request was allowed by FortiGate. C. This web request was inspected using the root web filter profile. D. The requested URL belongs to category ID 52.

Discussion 0

Correct Answer: A,D Vote an answer

Question 6

A corporate network allows Internet Access to FSSO users only. The FSSO user student does not have Internet access after successfully logged into the Windows AD network. The output of the 'diagnose debug authd fsso list' command does not show student as an active FSSO user. Other FSSO users can access the Internet without problems. What should the administrator check? (Choose two.)

A. The student workstation's IP subnet must be listed in the CA's trusted list. B. At least one of the student's user groups must be allowed by a FortiGate firewall policy. C. The user student must belong to one or more of the monitored user groups. D. The user student must not be listed in the CA's ignore user list.

Discussion 0

Correct Answer: B,C Vote an answer

Question 7

View the exhibit, which contains the output of a diagnose command, and then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

A. Servers with a negative TZ value are experiencing a service outage. B. FortiGate used 209.222.147.3 as the initial server to validate its contract. C. FortiGate will probe 121.111.236.179 every fifteen minutes for a response. D. Servers with the D flag are considered to be down.

Discussion 0

Correct Answer: A,B Vote an answer

Question 8

An administrator is running the following sniffer in a FortiGate:
diagnose sniffer packet any "host 10.0.2.10" 2
What information is included in the output of the sniffer? (Choose two.)

A. Ethernet headers. B. IP payload. C. IP headers. D. Port names.

Discussion 0

Correct Answer: B,C Vote an answer

Question 9

View the exhibit, which contains the output of a debug command, and then answer the question below.

What statement is correct about this FortiGate?

A. It is currently in system conserve mode because of high memory usage. B. It is currently in FD conserve mode. C. It is currently in system conserve mode because of high CPU usage. D. It is currently in kernel conserve mode because of high memory usage.

Discussion 0

Correct Answer: A Vote an answer