Fortinet NSE 7 - Enterprise Firewall 7.0 - NSE7_EFW-7.0 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

When does a RADIUS server send an Access-Challenge packet?

A. The user account is not found in the server. B. The user credentials are wrong. C. The server requires more information from the user, such as the token code for two-factor authentication. D. The server does not have the user credentials yet.

Discussion 0

Correct Answer: C Vote an answer

Question 2

Refer to the exhibit, which shows a partial routing table.

Assuming all the appropriate firewall policies are configured, what two changes would an administrator need to make if they wanted to send traffic from a client directly connected to port3, to a server directly connected to port4? (Choose two.)

A. Disable auto-asic-offload as this is not supported between VRF instances. B. Enable SNAT on the relevant firewall policies to prevent RPF check drops. C. Configure RIPv2 to exchange route information between the VRF instances. D. Configure route leaking between port3 and port4. E. Configure route leaking between VRF 12 and VRF 21.

Discussion 0

Correct Answer: B,E Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

How does FortiManager handle FortiGuard requests from FortiGate devices, when it is configured as a local FDS?

A. FortiManager supports only FortiGuard push to managed devices. B. FortiManager can download and maintain local copies of FortiGuard databases. C. FortiManager will respond to update requests only if they originate from a managed device. D. FortiManager does not support rating requests.

Discussion 0

Correct Answer: B Vote an answer

Question 4

Which two conditions must be met for a statistic route to be active in the routing table? (Choose two.)

A. The link health monitor (if configured) is up. B. There is no other route, to the same destination, with a higher distance. C. The next-hop IP address is up. D. The outgoing interface is up.

Discussion 0

Correct Answer: A,D Vote an answer

Question 5

A FortiGate has two default routes:

All Internet traffic is currently using port1. The exhibit shows partial information for one sample session of Internet traffic from an internal user:

What would happen with the traffic matching the above session if the priority on the first default route (IDd1) were changed from 5 to 20?

A. The session would remain in the session table, but its traffic would now egress from both port1 and port2. B. The session would remain in the session table, and its traffic would start to egress from port2. C. The session would be deleted, and the client would need to start a new session. D. The session would remain in the session table, and its traffic would still egress from port1.

Discussion 0

Correct Answer: D Vote an answer

Question 6

Which configuration can be used to reduce the number of BGP sessions in an IBGP network?

A. route-reflector-peer enable B. route-reflector-server enable C. route-reflector-client enable D. route-reflector enable

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 7

Refer to the exhibit, which shows a session entry. Which statement about this session is true?

A. It is an ICMP session from 10.1.10.10 to 10.200.5. 1. B. It is a TCP session in the established state, from 10.1.10.10 to 10.200.5.1. C. It is an ICMP session from 10.1.10.10 to 10.200.1.1. D. It is a TCP session in close_wait state, from 10. l. 10.10 to 10.200.1.1.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 8

An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage. However, after the changes, one network application started to have problems. During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before the arrival of the SYN/ACKs. When the SYN/ACK packets arrive to the FortiGate, the unit has already deleted the respective sessions. Which TCP session timer must be increased to fix this problem?

A. TCP time wait. B. TCP half close. C. TCP half open. D. TCP session time to live.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 9

Refer to the exhibit, which shows the output of a BGP debug command.

What can be concluded about the router in this scenario?

A. The State/PfxRcd for neighbor 100.64.3.1 will not change until an administrator on the local router adjusts the inbound route filtering so that prefixes received can be added to the RIB. B. All of the neighbors displayed are part of a single BGP configuration on the local router with the neighbor-range set to a value of 4. C. The router 100.64.3.1 needs to update the local AS number in its BGP configuration in order to bring up the BGP session with the local router. D. The BGP session with peer 10.127.0.75 is up.

Discussion 0

Correct Answer: D Vote an answer

Question 10

View the exhibit, which contains the output of a BGP debug command, and then answer the question below.

Which of the following statements about the exhibit are true? (Choose two.)

A. The local BGP peer has received a total of three BGP prefixes. B. For the peer 10.125.0.60, the BGP state of is Established. C. The local BGP peer has not established a TCP session to the BGP peer 10.200.3.1. D. Since the BGP counters were last reset, the BGP peer 10.200.3.1 has never been down.

Discussion 0

Correct Answer: B,C Vote an answer

Question 11

Which of the following statements is true regarding a FortiGate configured as an explicit web proxy?

A. FortiGate limits the number of simultaneous sessions per explicit web proxy user. This limit CANNOT be modified by the administrator. B. FortiGate limits the total number of simultaneous explicit web proxy users. C. FortiGate limits the number of workstations that authenticate using the same web proxy user credentials. This limit CANNOT be modified by the administrator. D. FortiGate limits the number of simultaneous sessions per explicit web proxy user The limit CAN be modified by the administrator

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 12

View the exhibit, which contains an entry in the session table, and then answer the question below.

Which one of the following statements is true regarding FortiGate's inspection of this session?

A. FortiGate applied proxy-based inspection. B. FortiGate forwarded this session without any inspection. C. FortiGate applied explicit proxy-based inspection. D. FortiGate applied flow-based inspection.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 13

Examine the following routing table and BGP configuration; then answer the question below.

TheBGP connection is up, but the local peer is NOT advertising the prefix 192.168.1.0/24. Which configuration change will make the local peer advertise this prefix?

A. Enable the redistribution of connected routers into BGP. B. Enable the setting ebgp-multipath. C. Enable the redistribution of static routers into BGP. D. Disable the setting network-import-check.

Discussion 0

Correct Answer: D Vote an answer