NSE7_EFW-6.4 Fortinet Exam Questions and Free Practice Test

Question 13

View the exhibit, which contains the output of a web diagnose command, and then answer the question below.
NSE7_EFW-6.4 dumps exhibit
Which one of the following statements explains why the cache statistics are all zeros?

A. The administrator has reallocated the cache memory to a separate process.

B. There are no users making web requests.

C. The FortiGuard web filter cache is disabled in the FortiGate’s configuration.

D. FortiGate is using a flow-based web filter and the cache applies only to proxy-based inspection.

Correct Answer:C

Question 14

Refer to the exhibit, which shows the output of a debug command.
NSE7_EFW-6.4 dumps exhibit
Which two statements about the output are true? (Choose two.)

A. The local FortiGate OSPF router ID is 0.0.0.4.

B. Port4 is connected to the OSPF backbone area.

C. In the network connected to port4, two OSPF routers are down.

D. The local FortiGate is the backup designated router.

Correct Answer:AB
Area 0.0.0.0 is the backbone area.

Question 15

View the exhibit, which contains a screenshot of some phase-1 settings, and then answer the question below.
NSE7_EFW-6.4 dumps exhibit
The VPN is up, and DPD packets are being exchanged between both IPsec gateways; however, traffic cannot pass through the tunnel. To diagnose, the administrator enters these CLI commands:

However, the IKE real time debug does not show any output. Why?

A. The debug output shows phases 1 and 2 negotiations onl

B. Once the tunnel is up, it does not show any more output.

C. The log-filter setting was set incorrectl

D. The VPN’s traffic does not match this filter.

E. The debug shows only error message

F. If there is no output, then the tunnel is operating normally.

G. The debug output shows phase 1 negotiation onl

H. After that, the administrator must enable the following real time debug: diagnose debug application ipsec -1.

Correct Answer:B

Question 16

Examine the output of the ‘get router info ospf interface’ command shown in the exhibit; then answer the question below.
NSE7_EFW-6.4 dumps exhibit
Which statements are true regarding the above output? (Choose two.)

A. The port4 interface is connected to the OSPF backbone area.

B. The local FortiGate has been elected as the OSPF backup designated router.

C. There are at least 5 OSPF routers connected to the port4 network.

D. Two OSPF routers are down in the port4 network.

Correct Answer:AC
on BROADCAST network there are 4 neighbors, among which 1*DR +1*BDR. So our FG has 4 neighbors, but create adjacency only with 2 (with DR and BDR). 2 neighbors DRother (not down).

Question 17

Which two tasks are automated using the Install Wizard on FortiManager? (Choose two.)

A. Preview pending configuration changes for managed devices.

B. Add devices to FortiManager.

C. Import policy packages from managed devices.

D. Install configuration changes to managed devices.

E. Import interface mappings from managed devices.

Correct Answer:AD
https://help.fortinet.com/fmgr/50hlp/56/5-6-2/FortiManager_Admin_Guide/1000_Device Manager/1200_ins
There are 4 main wizards:Add Device: is used to add devices to central management and import their configurations.
Install: is used to install configuration changes from Device Manager or Policies & Objects to the managed devices. It allows you to preview the changes and, if the administrator doesn’t agree with the changes, cancel and modify them.
Import policy: is used to import interface mapping, policy database, and objects associated with the managed devices into a policy package under the Policy & Object tab. It runs with the Add Device wizard by default and may be run at any time from the managed device list.
Re-install policy: is used to perform a quick install of the policy package. It doesn’t give the ability to preview the changes that will be installed to the managed device.

Question 18

Examine the following partial outputs from two routing debug commands; then answer the question below.
# get router info kernel
tab=254 vf=0 scope=0type=1 proto=11 prio=0 0.0.0.0/0.0.0.0/0->0.0.0.0/0 pref=0.0.0.0 gwy=10.200.1.254 dev=2(port1)
tab=254 vf=0 scope=0type=1 proto=11 prio=10 0.0.0.0/0.0.0.0/0->0.0.0.0/0 pref=0.0.0.0 gwy=10.200.2.254 dev=3(port2)
tab=254 vf=0 scope=253type=1 proto=2 prio=0 0.0.0.0/0.0.0.0/.->10.0.1.0/24 pref=10.0.1.254 gwy=0.0.0.0 dev=4(port3)
# get router info routing-table all s*0.0.0.0/0 [10/0] via 10.200.1.254, portl [10/0] via 10.200.2.254, port2, [10/0] dO.0.1.0/24 is directly connected, port3 dO.200.1.0/24 is directly connected, portl d0.200.2.0/24 is directly connected, port2
Which outbound interface or interfaces will be used by this FortiGate to route web traffic from internal users to the Internet?

A. port!

B. port2.

C. Both portl and port2.

D. port3.

Correct Answer:B

START NSE7_EFW-6.4 EXAM