NSE7_EFW-7.0 Fortinet Exam Questions and Free Practice Test

Question 19

An administrator has enabled HA session synchronization in a HA cluster with two members. Which flag is added to a primary unit’s session to indicate that it has been synchronized to the secondary unit?

A. redir.

B. dirty.

C. synced

D. nds.

Correct Answer:C
The synced sessions have the ‘synced’ flag. The command ‘diag sys session list’ can be used to see the sessions on the member, with the associated flags.

Question 20

Which real time debug should an administrator enable to troubleshoot RADIUS authentication problems?

A. Diagnose debug application radius -1.

B. Diagnose debug application fnbamd -1.

C. Diagnose authd console –log enable.

D. Diagnose radius console –log enable.

Correct Answer:B
https://kb.fortinet.com/kb/documentLink.do?externalID=FD32838

Question 21

An administrator has configured a FortiGate device with two VDOMs: root and internal. The administrator has also created and inter-VDOM link that connects both VDOMs. The objective is to have each VDOM advertise some routes to the other VDOM via OSPF through the inter-VDOM link. What OSPF configuration settings must match in both VDOMs to have the OSPF adjacency successfully forming? (Choose three.)

A. Router ID.

B. OSPF interface area.

C. OSPF interface cost.

D. OSPF interface MTU.

E. Interface subnet mask.

Correct Answer:BDE

Question 22

Which two statements about an auxiliary session are true? (Choose two.)

A. With the auxiliary session setting enabled, ECMP traffic is accelerated to the NP6 processor.

B. With the auxiliary session setting enabled, two sessions will be created in case of routing change.

C. With the auxiliary session setting disabled, for each traffic path, FortiGate will use the same auxiliary session.

D. With the auxiliary session disabled, only auxiliary sessions will be offloaded.

Correct Answer:CD

Question 23

An administrator is running the following sniffer in a FortiGate: diagnose sniffer packet any “host 10.0.2.10” 2
What information is included in the output of the sniffer? (Choose two.)

A. Ethernet headers.

B. IP payload.

C. IP headers.

D. Port names.

Correct Answer:BC
https://kb.fortinet.com/kb/documentLink.do?externalID=11186

Question 24

Which statement about the designated router (DR) and backup designated router (BDR) in an OSPF multi-access network is true?

A. FortiGate first checks the OSPF ID to elect a DR.

B. Non-DR and non-BDR routers will form full adjacencies to DR and BDR only.

C. BDR is responsible for forwarding link state information from one router to another.

D. Only the DR receives link state information from non-DR routers.

Correct Answer:B

START NSE7_EFW-7.0 EXAM