NSE7_EFW-6.4 Fortinet Exam Questions and Free Practice Test

Question 25

View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.
NSE7_EFW-6.4 dumps exhibit
Which statements about this debug output are correct? (Choose two.)

A. The remote gateway IP address is 10.0.0.1.

B. It shows a phase 1 negotiation.

C. The negotiation is using AES128 encryption with CBC hash.

D. The initiator has provided remote as its IPsec peer ID.

Correct Answer:BD

Question 26

Refer to the exhibit, which contains the partial output of a diagnose command.
NSE7_EFW-6.4 dumps exhibit
Based on the output, which two statements are correct? (Choose two.)

A. Anti-replay is enabled.

B. DPD is disabled.

C. Remote gateway IP is 10.200.4.1.

D. Quick mode selectors are disabled.

Correct Answer:AC

Question 27

View the exhibit, which contains the output of a debug command, and then answer the question below.
NSE7_EFW-6.4 dumps exhibit
Which one of the following statements about this FortiGate is correct?

A. It is currently in system conserve mode because of high CPU usage.

B. It is currently in extreme conserve mode because of high memory usage.

C. It is currently in proxy conserve mode because of high memory usage.

D. It is currently in memory conserve mode because of high memory usage.

Correct Answer:D

Question 28

View the exhibit, which contains a session entry, and then answer the question below.
NSE7_EFW-6.4 dumps exhibit
Which statement is correct regarding this session?

A. It is an ICMP session from 10.1.10.10 to 10.200.1.1.

B. It is an ICMP session from 10.1.10.10 to 10.200.5.1.

C. It is a TCP session in ESTABLISHED state from 10.1.10.10 to 10.200.5.1.

D. It is a TCP session in CLOSE_WAIT state from 10.1.10.10 to 10.200.1.1.

Correct Answer:B

Question 29

View the exhibit, which contains a partial routing table, and then answer the question below.
NSE7_EFW-6.4 dumps exhibit
Assuming all the appropriate firewall policies are configured, which of the following pings will FortiGate route? (Choose two.)

A. Source IP address 10.1.0.24, Destination IP address 10.72.3.20.

B. Source IP address 10.72.3.27, Destination IP address 10.1.0.52.

C. Source IP address 10.72.3.52, Destination IP address 10.1.0.254.

D. Source IP address 10.73.9.10, Destination IP address 10.72.3.15.

Correct Answer:BC

Question 30

When does a RADIUS server send an Access-Challenge packet?

A. The server does not have the user credentials yet.

B. The server requires more information from the user, such as the token code for two-factor authentication.

C. The user credentials are wrong.

D. The user account is not found in the server.

Correct Answer:B

START NSE7_EFW-6.4 EXAM