NSE7_EFW-7.0 Fortinet Exam Questions and Free Practice Test

Question 25

A FortiGate has two default routes:
NSE7_EFW-7.0 dumps exhibit
All Internet traffic is currently using port1. The exhibit shows partial information for one sample session of Internet traffic from an internal user:

What would happen with the traffic matching the above session if the priority on the first default route (IDd1) were changed from 5 to 20?

A. The session would be deleted, and the client would need to start a new session.

B. The session would remain in the session table, and its traffic would start to egress from port2.

C. The session would remain in the session table, but its traffic would now egress from both port1 and port2.

D. The session would remain in the session table, and its traffic would still egress from port1.

Correct Answer:D

Question 26

Examine the output of the ‘diagnose sys session list expectation’ command shown in the exhibit; than answer the question below.
NSE7_EFW-7.0 dumps exhibit
Which statement is true regarding the session in the exhibit?

A. It was created by the FortiGate kernel to allow push updates from FotiGuard.

B. It is for management traffic terminating at the FortiGate.

C. It is for traffic originated from the FortiGate.

D. It was created by a session helper or ALG.

Correct Answer:D

Question 27

Refer to the exhibit, which contains the output of get system ha status. Which two statements about the output are true? (Choose two.)
NSE7_EFW-7.0 dumps exhibit

A. The slave configuration is synchronized with the master.

B. port7 is used as the HA heartbeat on all devices in the cluster.

C. Primary is selected based on the priority configured under config system ha.

D. The HA management IP is 169.254.0.2.

Correct Answer:BC

Question 28

Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.)

A. IPS failopen

B. mem failopen

C. AV failopen

D. UTM failopen

Correct Answer:AC

Question 29

View the exhibit, which contains a partial output of an IKE real-time debug, and then answer the question below.
NSE7_EFW-7.0 dumps exhibit
Based on the debug output, which phase-1 setting is enabled in the configuration of this VPN?

A. auto-discovery-sender

B. auto-discovery-forwarder

C. auto-discovery-shortcut

D. auto-discovery-receiver

Correct Answer:B

Question 30

Which two statements about OCVPN are true? (Choose two.)

A. Only root vdom supports OCVPN.

B. OCVPN supports static and dynamic IPs in WAN interface.

C. OCVPN offers only Hub-Spoke VPNs.

D. FortiGate devices under different FortiCare accounts can be used to form OCVPN.

Correct Answer:AB

START NSE7_EFW-7.0 EXAM