Question 1

Examine the output from the BGP real time debug shown in the exhibit, then the answer the question below:
Which statements are true regarding the output in the exhibit? (Choose two.)

Accepted Answer

Correct answer: AB

Question 2

Which two conditions must be met for a statistic route to be active in the routing table? (Choose two.)

Accepted Answer

Correct answer: AC

Question 3

Examine the IPsec configuration shown in the exhibit; then answer the question below.

From SurePassExam
https://www.surepassexam.com/NSE7_EFW-7.0-exam-dumps.html (163 New Questions)
An administrator wants to monitor the VPN by enabling the IKE real time debug using these commands: diagnose vpn ike log-filter src-addr4 10.0.10.1
diagnose debug application ike -1 diagnose debug enable
The VPN is currently up, there is no traffic crossing the tunnel and DPD packets are being interchanged
between both IPsec gateways. However, the IKE real time debug does NOT show any output. Why isn’t there any output?

Accepted Answer

Correct answer: B

Question 4

Refer to the exhibit, which shows a session table entry.
Which statement about FortiGate behavior relating to this session is true?

Accepted Answer

Enterprise_Firewall_7.0_Study_Guide-Online.pdf p 91, 92 First digit of "proto_state" value at 1 and considering all counters are at 0 for HW acceleration means
CPU usage

Question 5

Refer to the exhibit, which contains the output of a BGP debug command.
Which statement about the exhibit is true?

Accepted Answer

Correct answer: B

Question 6

Refer to the exhibit, which shows a central management configuration.
Which server will FortiGate choose for web filter rating requests, if 10.0.1.240 is experiencing an outage?

Accepted Answer

by default,( include-default-servers ) enabled .this allows fortigate to communicate with the public fortiguard servers , if the fortimanger devices (configured in
server-list) are unavailable .

Question 7

From SurePassExam
https://www.surepassexam.com/NSE7_EFW-7.0-exam-dumps.html (163 New Questions)
A FortiGate is rebooting unexpectedly without any apparent reason. What troubleshooting tools could an administrator use to get more information about the
problem? (Choose two.)

Accepted Answer

Correct answer: CD

Question 8

An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage. However, after the changes, one network application started
to have problems. During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before
the arrival of the SYN/ACKs. When the SYN/ACK packets arrive to the FortiGate, the unit has already deleted the respective sessions. Which TCP session timer
must be increased to fix this problem?

Accepted Answer

http://docs-legacy.fortinet.com/fos40hlp/43prev/wwhelp/wwhimpl/common/html/wwhe
lp.htm?context=fgt&file=CLI_get_Commands.58.25.html
The tcp-halfopen-timer controls for how long, after a SYN packet, a session without SYN/ACKremains in the table.
The tcp-halfclose-timer controls for how long, after a FIN packet, a session without FIN/ACKremains in the table.
The tcp-timewait-timer controls for how long, after a FIN/ACK packet, a session remains in thetable. A closed session remains in the session table for a few
seconds more to allow any out-of-sequence packet.

Question 9

Refer to the exhibit, which shows partial outputs from two routing debug commands.
Which change must an administrator make on FortiGate to route web traffic from internal users to the internet, using ECMP?

Accepted Answer

ECMP pre-requisite is "routes must have the same destination and costs. In the case of static routes, costs include distance and priority". In this case traffic is
routed through port 1 because of the lower priority. If we raise priority on port 1 to the value of 10 the traffic should be routed through both ports 1 and 2.
https://docs.fortinet.com/document/fortigate/7.0.1/administration-guide/25967/equal-cost-multi-path

Question 10

Refer to the exhibit, which contains partial output from an IKE real-time debug.

From SurePassExam
https://www.surepassexam.com/NSE7_EFW-7.0-exam-dumps.html (163 New Questions)
Which two statements about this debug output are correct? (Choose two.)

Accepted Answer

Correct answer: BC