NSE 7 Network Security Architect NSE7_EFW-6.4 Practice Test Engine: Try These 117 Exam Questions
Guaranteed Success in NSE 7 Network Security Architect NSE7_EFW-6.4 Exam Dumps
NEW QUESTION 10
Refer to the exhibit, which contains the output of a BGP debug command.
Which statement about the exhibit is true?
- A. The local router BGP state is OpenConfirm with the 10.127.0.75 peer.
- B. The local router has received a total of three BGPprefixes from all peers.
- C. Since the counters were last reset, the 10.200.3.1 peer has never been down.
- D. The local router has not established a TCP session with 100.64.3.1.
Answer: D
NEW QUESTION 11
Refer to the exhibit, which contains partial outputs from two routing debug commands.
Why is the port2 default route not in the second command's output?
- A. It has a higher distance than the default route using port1.
- B. It is disabled in the FortiGate configuration.
- C. It has a lower priority value than the default route using port1.
- D. It has a higher priority value than the default route using port1.
Answer: A
NEW QUESTION 12
AFortiGate's portl is connected to a private network. Its port2 is connected to the Internet. Explicit web proxy is enabled in port1 and only explicit web proxy users can access the Internet. Web cache is NOT enabled. An internal web proxy user is downloading a file from the Internet via HTTP. Which statements are true regarding the two entries in the FortiGate session table related with this traffic? (Choose two.)
- A. One session has the proxy flag on, the other one does not.
- B. The destination IP addresses of both sessions are IP addresses assigned to FortiGate'sinterfaces.
- C. Both session have the local flag on.
- D. One of the sessions has the IP address of port2 as the source IP address.
Answer: C,D
NEW QUESTION 13
View the exhibit, which contains the output of a web diagnose command, and then answer the question below.
Which one of the following statements explains why the cache statistics are all zeros?
- A. The FortiGuard web filter cache is disabled in the FortiGate's configuration.
- B. There are no users making web requests.
- C. The administrator has reallocated the cache memory to a separate process.
- D. FortiGate is using a flow-based web filter and the cache applies only to proxy-based inspection.
Answer: A
NEW QUESTION 14
An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator noticed that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link-failed-signal to fix the problem. Which statement is correct regarding this command?
- A. Forces the former primary device to shut down all its non-heartbeat interfaces forone second while the failover occurs.
- B. Disables all the non-heartbeat interfaces in all the HA members for two seconds after a failover.
- C. Sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.
- D. Sends a link failed signal to all connected devices.
Answer: A
NEW QUESTION 15
Examine the output of the 'diagnose ips anomaly list' command shown in the exhibit; then answer the question below.
Which IP addresses are included in the output of thiscommand?
- A. Those whose traffic exceeded a threshold of a matching DoS policy.
- B. Those whose traffic was detected as an anomaly by an IPS sensor.
- C. Those whose traffic matches a DoS policy.
- D. Those whose traffic matches an IPS sensor.
Answer: C
NEW QUESTION 16
Refer to the exhibit, which contains partial output from an IKE real-time debug.
Based on the debug output, which phase 1 setting is enabled in the configuration of this VPN?
- A. auto-discovery-shortcut
- B. auto-discovery-sender
- C. auto-discovery-receiver
- D. auto-discovery-forwarder
Answer: B
NEW QUESTION 17
Examine the output of the 'diagnose debug rating' command shown in the exhibit; then answer the question below.
Which statement are true regarding the output in the exhibit? (Choose two.)
- A. A server's round trip delay (RTT) is not used to calculate its weight.
- B. The TZ value represents the delta between each FortiGuard server's time zone and the FortiGate's time zone.
- C. FortiGate will send the FortiGuard queries to the server with highest weight.
- D. There are three FortiGuard servers that are not responding to the queries sent by the FortiGate.
Answer: B,C
NEW QUESTION 18
Which of the following conditions must be met fora static route to be active in the routing table? (Choose three.)
- A. There is no other route, to the same destination, with a higher distance.
- B. The outgoing interface is up.
- C. The link health monitor (if configured) is up.
- D. The next-hop IP address is up.
- E. The next-hop IP address belongs to one of the outgoing interface subnets.
Answer: B,C,E
Explanation:
Explanation
A configured static route only goes to routing table from routing database when all the following are met :
* The outgoing interface is up
* There isno other matching route with a lower distance
* The link health monitor (if configured) is successful
* The next-hop IP address belongs to one of the outgoing interface subnets
NEW QUESTION 19
Examine the output of the 'diagnose sys session list expectation' command shown in the exhibit; than answer the question below.
Which statement is true regarding the session in the exhibit?
- A. It was created by the FortiGate kernel to allow push updates from FotiGuard.
- B. It is for traffic originated from the FortiGate.
- C. It was created by a session helper or ALG.
- D. It is for management traffic terminating at the FortiGate.
Answer: C
NEW QUESTION 20
View the exhibit, which contains a session entry, and then answer the question below.
Which statement is correct regarding this session?
- A. It is an ICMP session from 10.1.10.10 to 10.200.1.1.
- B. It is a TCP session in CLOSE_WAIT state from 10.1.10.10 to 10.200.1.1.
- C. It is an ICMP session from 10.1.10.10 to 10.200.5.1.
- D. It is a TCP session in ESTABLISHED state from 10.1.10.10 to 10.200.5.1.
Answer: C
NEW QUESTION 21
View the exhibit, which contains a partial web filter profile configuration, and then answer the question below.
Which action willFortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?
- A. FortiGate will block the connection as an invalid URL.
- B. FortiGate will exempt the connection based on the Web Content Filter configuration.
- C. FortiGate will block the connection based on the URL Filter configuration.
- D. FortiGate will allow the connection based on the FortiGuard category based filter configuration.
Answer: C
Explanation:
Explanation
fortigate does it in order Static URL -> FortiGuard -> Content -> Advanced (java, cookie removal..)so block it in first step
NEW QUESTION 22
Which two tasks are automated using the Install Wizard on FortiManager? (Choose two.)
- A. Installing configuration changes to managed devices
- B. Previewing pending configuration changes for managed devices
- C. Adding devices to FortiManager
- D. Importing interface mappings from managed devices
Answer: A,B
NEW QUESTION 23
Which statements about bulk configuration changes using FortiManager CLI scripts are correct? (Choose two.)
- A. When executed on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate.
- B. When executed on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.
- C. When executed on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate.
- D. When executed on the All FortiGate in ADOM, changes are automatically installed without creating a new revision history.
Answer: B,C
Explanation:
CLI scripts can be run in three different ways: Device Database: By default, a script is executed on the device database. It is recommend you run the changes on the device database (default setting), as this allows you to check what configuration changes you will send to the managed device. Once scripts are run on the device database, you can install these changes to a managed device using the installation wizard.
Policy Package, ADOM database: If a script contains changes related to ADOM level objects and policies, you can change the default selection to run on Policy Package, ADOM database and can then be installed using the installation wizard.
Remote FortiGate directly (through CLI): A script can be executed directly on the device and you don't need to install these changes using the installation wizard. As the changes are directly installed on the managed device, no option is provided to verify and check the configuration changes through FortiManager prior to executing it.
NEW QUESTION 24
Examine the partial output from the IKE real time debug shown in the exhibit; then answer the question below.
Why didn't the tunnel come up?
- A. Theremote gateway's Phase-2 configuration does not match the local gateway's phase-2 configuration.
- B. IKE mode configuration is not enabled in the remote IPsec gateway.
- C. One IPsec gateway is using main mode, while theother IPsec gateway is using aggressive mode.
- D. The remote gateway's Phase-1 configuration does not match the local gateway's phase-1 configuration.
Answer: D
NEW QUESTION 25
......
Test Engine to Practice NSE7_EFW-6.4 Test Questions: https://examsboost.validbraindumps.com/NSE7_EFW-6.4-exam-prep.html