NSE7_EFW-6.2 sample questions

Question 1

Which two statements about application layer test commands are true? (Choose two.)

Accepted Answer

Some of them can be used to restart an application.

Accepted Answer

Some of them display statistics and configuration information about a feature or process.

Answer

They are used to filter real-time debugs.

Answer

They display real-time application debugs.

Question 2

Refer to the exhibits, which contain configuration on FortiGate and partial session information.

All traffic to the Internet currently egresses from port1. The exhibit shows partial session information for Internet traffic from a user on the internal network.

If the priority on route ID 1 were changed from 5 to 20, what would happen to traffic matching that user’s session?

Accepted Answer

The session would remain in the session table, and its traffic would still egress from port1.

Answer

The session would remain in the session table, but its traffic would now egress from both port1 and port2.

Answer

The session would remain in the session table, and its traffic would start to egress from port2.

Answer

The session would be deleted, so the client would need to start a new session.

Question 3

Which three conditions are required for two FortiGate devices to form an OSP adjacency? (Choose three.)

Accepted Answer

Hello and dead intervals match

Accepted Answer

OSPF IP MTUs match

Accepted Answer

IP addresses are in the same subnet

Answer

OSPF costs match

Answer

OSPF peer IDs match

Question 4

Which two statements about bulk configuration changes using FortiManager CLI scripts are correct? (Choose two.)

Accepted Answer

When executed on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate.

Accepted Answer

When executed on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.

Answer

When executed on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate.

Answer

When executed on the All FortiGate in ADOM, changes are automatically installed without creating a new revision history.

Question 5

Refer to the exhibit, which contains a partial output of an IKE real-time debug. Based on the debug output, which phase-1 setting is enabled in the configuration of this VPN?

Accepted Answer

auto-discovery-sender

Answer

auto-discovery-receiver

Answer

auto-discovery-forwarder

Answer

auto-discovery-shortcut

Question 6

Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.) A.IPS failopenB.mem failopenC.AV failopenD.UTM failopen

Accepted Answer

IPS failopen

Accepted Answer

AV failopen

Answer

mem failopen

Answer

UTM failopen

NSE7_EFW-6.2 Sample Questions & Answers

Ready for the real thing?

NSE7_EFW-6.2 Sample Questions & Answers

Related practice tests

Ready for the real thing?