Fortinet NSE7_EFW-6.2 - Fortinet NSE 7 - Enterprise Firewall 6.2 Exam

Page:    1 / 10   
Total 49 questions

Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.)

  • A. IPS failopen
  • B. mem failopen
  • C. AV failopen
  • D. UTM failopen


Answer : AC

Refer to the exhibit, which contains the partial output of a diagnose command.


Based on the output, which two statements are correct? (Choose two.)

  • A. Anti-replay is enabled.
  • B. DPD is disabled.
  • C. Remote gateway IP is 10.200.4.1.
  • D. Quick mode selectors are disabled.


Answer : AC

Refer to the exhibit, which contains the output of a diagnose command.


Which two statements regarding the output in the exhibit are true? (Choose two.)

  • A. FortiGate will probe 121.111.236.179 every fifteen minutes for a response.
  • B. Servers with a negative TZ value are experiencing a service outage.
  • C. Servers with the D flag are considered to be down.
  • D. FortiGate used 209.222.147.36 as the initial server to validate its contract.


Answer : AD

Which two statements about application layer test commands are true? (Choose two.)

  • A. They are used to filter real-time debugs.
  • B. They display real-time application debugs.
  • C. Some of them can be used to restart an application.
  • D. Some of them display statistics and configuration information about a feature or process.


Answer : CD

Refer to the exhibits, which contain configuration on FortiGate and partial session information.



All traffic to the Internet currently egresses from port1. The exhibit shows partial session information for Internet traffic from a user on the internal network.
If the priority on route ID 1 were changed from 5 to 20, what would happen to traffic matching that user"™s session?

  • A. The session would remain in the session table, but its traffic would now egress from both port1 and port2.
  • B. The session would remain in the session table, and its traffic would still egress from port1.
  • C. The session would remain in the session table, and its traffic would start to egress from port2.
  • D. The session would be deleted, so the client would need to start a new session.


Answer : B

Page:    1 / 10   
Total 49 questions