Updated Jan-2023 Test Engine to Practice NSE7_EFW-6.4 Test Questions
NSE7_EFW-6.4 Real Exam Questions Test Engine Dumps Training With 124 Questions
NEW QUESTION 18
An administrator wants to capture ESP traffic between two FortiGates using the built-in sniffer.If the administrator knows that there is no NAT device located between both FortiGates, what command should the administrator execute?
- A. diagnose sniffer packet any 'udp port 4500'
- B. diagnose snifferpacket any 'esp'
- C. diagnose sniffer packet any 'udp port 500 or udp port 4500'
- D. diagnose sniffer packet any 'udp port 500'
Answer: B
Explanation:
Explanation
Capture IKE Traffic without NAT:diagnose sniffer packet 'host and udp port 500'
--------------------------------------Capture ESP
Traffic without NAT:diagnose sniffer packet any 'host and esp'
--------------------------------------Capture IKE
and ESP with NAT-T:diagnose sniffer packet any 'host and (udp port 500 or udp port 4500)'
NEW QUESTION 19
Which of the following statements is true regarding a FortiGate configured as an explicit web proxy?
- A. FortiGate limits the number of simultaneous sessions per explicit web proxy user. This limit CANNOT be modified by the administrator.
- B. FortiGate limits the number of simultaneous sessions per explicit web proxy user The limit CAN be modified by the administrator
- C. FortiGate limits the number of workstations that authenticate using the same web proxy user credentials. This limit CANNOT be modified by the administrator.
- D. FortiGate limits the total number of simultaneous explicit web proxy users.
Answer: D
Explanation:
https://help.fortinet.com/fos50hlp/52data/Content/FortiOS/fortigate-WAN-opt-52/web_proxy.htm#Explicit2 The explicit proxy does not limit the number of active sessions for each user. As a result the actual explicit proxy session count is usually much higher than the number of explicit web proxy users. If an excessive number of explicit web proxy sessions is compromising system performance you can limit the amount of users if the FortiGate unit is operating with multiple VDOMs.
NEW QUESTION 20
View the exhibit, which contains the output of a BGP debug command, and then answer the question below.
Which of the following statements about the exhibit are true? (Choose two.)
- A. Since the counters were last reset; the 10.200.3.1 peer has never been down.
- B. The local router has not established a TCP session with 100.64.3.1.
- C. The local router's BGP state is Established with the 10.125.0.60 peer.
- D. The local router has received a total of three BGP prefixes from all peers.
Answer: B,C
NEW QUESTION 21
Examine the output of the 'get router info ospfneighbor' command shown in the exhibit; then answer the question below.
Which statements are true regarding the output in the exhibit? (Choose two.)
- A. The local FortiGate is the backup designated router for the wan1 network.
- B. The interface ToRemote is OSPF network type point-to-point.
- C. The OSPF router with the ID 0.0.0.2is the designated router for the ToRemote network.
- D. The OSPF routers with the IDs 0.0.0.69 and 0.0.0.117 are both designated routers for the wan1 network.
Answer: A,B
Explanation:
Explanation
https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/13685-13.html
NEW QUESTION 22
Which statement about memory conserve mode is true?
- A. A FortiGate starts dropping all the new and old sessions when the configured memory use threshold reaches extreme.
- B. A FortiGate exits conserve mode when the configured memory use threshold reaches yellow.
- C. A FortiGate enters conserve mode when the configured memory use threshold reaches red
- D. A FortiGate starts dropping new sessions when the configured memory use threshold reaches red
Answer: D
NEW QUESTION 23
Examine the following traffic log; then answer the question below.
date-20xx-02-01 time=19:52:01 devname=master device_id="xxxxxxx" log_id=0100020007 type=event subtype=system pri critical vd=root service=kemel status=failure msg="NAT port is exhausted."
What does the log mean?
- A. There is not enough available memory in the system to create a new entry in the NAT port table.
- B. The limit for the maximum number of entries in the NAT port table has been reached.
- C. FortiGate does not have any available NAT port for a new connection.
- D. The limit for the maximum number of simultaneous sessions sharing the same NAT port has been reached.
Answer: D
NEW QUESTION 24
View the exhibit, which contains the output of a diagnose command, and then answer the question below.
What statements are correct regarding the output? (Choose two.)
- A. Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next-hop IP address 10.0.1.10.
- B. Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next-hop IP address 10.200.1.1.
- C. This is anexpected session created by a session helper.
- D. This is an expected session created by an application control profile.
Answer: B,C
NEW QUESTION 25
An administrator has configured a FortiGate device with two VDOMs: root and internal. The administrator has also created and inter-VDOM link that connects both VDOMs. The objective is to have each VDOM advertise some routes to the other VDOM via OSPF through the inter-VDOM link. What OSPF configuration settings must match in both VDOMs to have the OSPF adjacency successfully forming? (Choose three.)
- A. OSPF interface cost.
- B. Interface subnet mask.
- C. OSPF interface MTU.
- D. OSPF interface area.
- E. Router ID.
Answer: B,C,D
NEW QUESTION 26
View the exhibit, which contains the output of diagnose sys session list, and then answer the question below.
If the HA ID for the primary unit is zero (0), which statement is correct regarding the output?
- A. This session is synced with the slave unit.
- B. This session is for HA heartbeat traffic.
- C. The inspection of this session has been offloaded to the slave unit.
- D. This session cannot be synced with the slave unit.
Answer: A
NEW QUESTION 27
What is the purpose of an internal segmentation firewall (ISFW)?
- A. It splits the network into multiple security segments to minimize the impact of breaches.
- B. It inspects incoming traffic to protect services in the corporate DMZ.
- C. It is an all-in-one security appliance that is placed at remote sites to extend the enterprise network.
- D. It is the first line of defense at the network perimeter.
Answer: A
Explanation:
ISFW splits your network into multiple security segments. They serve as a breach containers from attacks that come from inside.
NEW QUESTION 28
View theexhibit, which contains the output of diagnose sys session stat, and then answer the question below.
Which statements are correct regarding the output shown? (Choose two.)
- A. There are 166 TCP sessions waiting to complete the three-way handshake.
- B. There are 0 ephemeral sessions.
- C. No sessions have been deleted because of memory pages exhaustion.
- D. All the sessions in the session table areTCP sessions.
Answer: B,C
Explanation:
Explanation
https://kb.fortinet.com/kb/documentLink.do?externalID=FD40578
NEW QUESTION 29
In which two states is a given session categorized as ephemeral? (Choose two.)
- A. A UDP session with only one packet received.
- B. A TCP session waiting to complete the three-way handshake.
- C. A UDP session with packets sent and received.
- D. A TCP session waiting for FIN ACK.
Answer: C,D
NEW QUESTION 30
A FortiGate device has the following LDAP configuration:
The LDAP user student cannot authenticate. The exhibit shows the output of the authentication real time debug while testing the student account:
Based on the above output, what FortiGate LDAP settings must the administer check? (Choose two.)
- A. cnid.
- B. password.
- C. dn.
- D. username.
Answer: B,D
Explanation:
Explanation
https://kb.fortinet.com/kb/viewContent.do?externalId=13141
NEW QUESTION 31
View the exhibit, which contains the output of a diagnose command, and then answer the question below.
Which statements are true regarding the output in the exhibit? (Choose two.)
- A. Servers with a negative TZ value are experiencing a service outage.
- B. FortiGate will probe 121.111.236.179 every fifteen minutes for a response.
- C. FortiGate used 209.222.147.3 as the initial server to validate its contract.
- D. Servers with the D flag are considered to be down.
Answer: B,C
Explanation:
Explanation
A - because flag is Failed so fortigate will check if server is available every 15 minD-state is I , contact to validate contract info
NEW QUESTION 32
Examine the output ofthe 'get router info bgp summary' command shown in the exhibit; then answer the question below.
Which statement can explain why the state of the remote BGP peer 10.200.3.1 is Connect?
- A. The TCP session for the BGP connection to 10.200.3.1 is down.
- B. The local peer is receiving the BGP keepalives from the remote peer but it has not received the OpenConfirm yet.
- C. The local peer is receiving the BGP keepalives from the remote peer but it has not received any BGP prefix yet.
- D. The local peer has received the BGP prefixed from the remote peer.
Answer: A
Explanation:
Explanation
http://www.ciscopress.com/articles/article.asp?p=2756480
NEW QUESTION 33
......
NSE7_EFW-6.4 Actual Questions Answers PDF 100% Cover Real Exam Questions: https://actualtests.torrentexam.com/NSE7_EFW-6.4-exam-latest-torrent.html
