[Q31-Q48] Real Fortinet NSE7_EFW-6.4 Exam Questions [Updated 2022]

NEW QUESTION 31
View the exhibit, which contains the partial output of an IKE real time debug, and then answerthe question below.

The administrator does not have access to the remote gateway. Based on the debug output, what configuration changes can the administrator make to the local gateway to resolve the phase 1 negotiation error?

NEW QUESTION 32
Which the following events can trigger the election of a new primary unit in a HA cluster? (Choose two.)

NEW QUESTION 33
Two independent FortiGate HA clusters are connected to the same broadcast domain. The administrator has reported that both clusters are using the same HA virtual MAC address. This creates a duplicated MAC address problem in the network. What HA setting must be changed in one of the HA clusters to fix the problem?

NEW QUESTION 34
A corporate network allows Internet Access to FSSO users only. The FSSO user student does not have Internet access after successfully logged into the Windows AD network. The output of the ‘diagnose debug authd fsso list’ command does not show student as an active FSSO user. Other FSSO users can access the Internet without problems. What should the administrator check? (Choose two.)

NEW QUESTION 35
View the exhibit, which contains a session entry, and then answer the question below.

Which statement is correct regarding this session?

NEW QUESTION 36
Which of the following statements are correct regardingapplication layer test commands? (Choose two.)

NEW QUESTION 37
AFortiGate’s portl is connected to a private network. Its port2 is connected to the Internet. Explicit web proxy is enabled in port1 and only explicit web proxy users can access the Internet. Web cache is NOT enabled. An internal web proxy user is downloading a file from the Internet via HTTP. Which statements are true regarding the two entries in the FortiGate session table related with this traffic? (Choose two.)

NEW QUESTION 38

Refer to the exhibit, which contains the output ofget system ha status.
Which two statements about the output are true? (Choose two.)

NEW QUESTION 39
View these partial outputs from two routing debug commands:

Which outbound interface will FortiGate use to route webtraffic from internal users to the Internet?

NEW QUESTION 40
Examine the output of the ‘diagnose ips anomaly list’ command shown in the exhibit; then answer the question below.

Which IP addresses are included in the output of this command?

NEW QUESTION 41
View the exhibit, which contains the partial output of adiagnose command, and then answer the question below.

Based on the output, which of the following statements is correct?

NEW QUESTION 42
Refer to the exhibit, which contains partial output from an IKE real-time debug.

Based on the debug output, which phase 1 setting is enabled in the configuration of this VPN?

NEW QUESTION 43
Examine the partial output from two web filter debug commands; then answer the question below:

Based on the above outputs, which is the FortiGuard web filter category for the web site www.fgt99.com?

NEW QUESTION 44
Which two statements about the Security Fabric are true? (Choose two.)

NEW QUESTION 45
Examine the following routing table and BGP configuration; then answer the question below.

TheBGP connection is up, but the local peer is NOT advertising the prefix 192.168.1.0/24. Which configuration change will make the local peer advertise this prefix?

NEW QUESTION 46
Refer to the exhibit, which contains partial output from an IKE real-time debug.

Which two statements about this debug output are correct? (Choose two.)

NEW QUESTION 47
Which two statements about FortiManager is true when it is deployed as alocal FDS? (Choose two.)

NEW QUESTION 48
View the global IPS configuration, and then answer the question below.

Which of the following statements is true regarding this configuration?