NSE7_EFW-6.4 Fortinet Exam Questions and Free Practice Test

Question 7

View the IPS exit log, and then answer the question below.
# diagnose test application ipsmonitor 3 ipsengine exit log”
pid = 93 (cfg), duration = 5605322 (s) at Wed Apr 19 09:57:26 2017 code = 11, reason: manual
What is the status of IPS on this FortiGate?

A. IPS engine memory consumption has exceeded the model-specific predefined value.

B. IPS daemon experienced a crash.

C. There are communication problems between the IPS engine and the management database.

D. All IPS-related features have been disabled in FortiGate’s configuration.

Correct Answer:D
The command diagnose test application ipsmonitor includes many options that are useful for troubleshooting purposes.Option 3 displays the log entries generated every time an IPS engine process stopped. There are various reasons why these logs are generated:Manual: Because of the configuration, IPS no longer needs to run (that is, all IPS-releated features have been disabled)

Question 8

Examine the partial output from two web filter debug commands; then answer the question below:
NSE7_EFW-6.4 dumps exhibit
Based on the above outputs, which is the FortiGuard web filter category for the web site www.fgt99.com?

A. Finance and banking

B. General organization.

C. Business.

D. Information technology.

Correct Answer:C

Question 9

Which the following events can trigger the election of a new primary unit in a HA cluster? (Choose two.)

A. Primary unit stops sending HA heartbeat keepalives.

B. The FortiGuard license for the primary unit is updated.

C. One of the monitored interfaces in the primary unit is disconnected.

D. A secondary unit is removed from the HA cluster.

Correct Answer:AC

Question 10

Which statement about memory conserve mode is true?

A. A FortiGate exits conserve mode when the configured memory use threshold reaches yellow.

B. A FortiGate starts dropping all the new and old sessions when the configured memory use threshold reaches extreme.

C. A FortiGate starts dropping new sessions when the configured memory use threshold reaches red

D. A FortiGate enters conserve mode when the configured memory use threshold reaches red

Correct Answer:C

Question 11

Which two statements about OCVPN are true? (Choose two.)

A. Only root vdom supports OCVPN.

B. OCVPN supports static and dynamic IPs in WAN interface.

C. OCVPN offers only Hub-Spoke VPNs.

D. FortiGate devices under different FortiCare accounts can be used to form OCVPN.

Correct Answer:AB

Question 12

Examine the following partial output from two system debug commands; then answer the question below.
NSE7_EFW-6.4 dumps exhibit
Which of the following statements are true regarding the above outputs? (Choose two.)

A. The unit is running a 32-bit FortiOS

B. The unit is in kernel conserve mode

C. The Cached value is always the Active value plus the Inactive value

D. Kernel indirectly accesses the low memory (LowTotal) through memory paging

Correct Answer:AC

START NSE7_EFW-6.4 EXAM