This page was exported from Best Free Exam Guide [ http://free.exams4sures.com ] Export date:Sat Mar 15 6:45:29 2025 / +0000 GMT ___________________________________________________ Title: [2022] Pass Fortinet NSE7_EFW-6.4 Test Practice Test Questions Exam Dumps [Q44-Q67] --------------------------------------------------- [2022] Pass Fortinet NSE7_EFW-6.4 Test Practice Test Questions Exam Dumps Verified NSE7_EFW-6.4 dumps Q&As - NSE7_EFW-6.4 dumps with Correct Answers NO.44 View the exhibit, which contains the output of a debug command, and then answer the question below.What statement is correct about this FortiGate?  It iscurrently in system conserve mode because of high CPU usage.  It is currently in FD conserve mode.  It is currently in kernel conserve mode because of high memory usage.  It is currently in system conserve mode because of high memory usage. NO.45 An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage. However, after the changes, one network application started to have problems. During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before the arrival of the SYN/ACKs. When the SYN/ACK packets arrive to the FortiGate, the unit has already deleted the respective sessions. Which TCP session timer must be increased to fix this problem?  TCP half open.  TCP half close.  TCP time wait.  TCP session time to live. http://docs-legacy.fortinet.com/fos40hlp/43prev/wwhelp/wwhimpl/common/html/wwhelp.htm?context=fgt&file=CLI_get_Commands.58.25.html The tcp-halfopen-timer controls for how long, after a SYN packet, a session without SYN/ACK remains in the table.The tcp-halfclose-timer controls for how long, after a FIN packet, a session without FIN/ACK remains in the table.The tcp-timewait-timer controls for how long, after a FIN/ACK packet, a session remains in the table. A closed session remains in the session table for a few seconds more to allow any out-of-sequence packet.NO.46 Whendoes a RADIUS server send an Access-Challenge packet?  The server does not have the user credentials yet.  The server requires more information from the user, such as the token code for two-factor authentication.  The user credentials are wrong.  The user account is not found in the server. NO.47 An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator noticed that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link-failed-signal to fix the problem. Which statement is correct regarding this command?  Forces the former primary device to shut down all its non-heartbeat interfaces forone second while the failover occurs.  Sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.  Sends a link failed signal to all connected devices.  Disables all the non-heartbeat interfaces in all the HA members for two seconds after a failover. NO.48 View the exhibit, which contains the output of diagnose sys session stat, and then answer the question below.Which statements are correct regarding the output shown? (Choose two.)  There are 0 ephemeral sessions.  All the sessions in the session table are TCP sessions.  No sessions have been deleted because of memory pages exhaustion.  There are 166 TCP sessions waiting to complete the three-way handshake. https://kb.fortinet.com/kb/documentLink.do?externalID=FD40578NO.49 View the exhibit, which contains a partial web filter profile configuration, and then answer the question below.Which action willFortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?  FortiGate will exempt the connection based on the Web Content Filter configuration.  FortiGate will block the connection based on the URL Filter configuration.  FortiGate will allow the connection based on the FortiGuard category based filter configuration.  FortiGate will block the connection as an invalid URL. Explanationfortigate does it in order Static URL -> FortiGuard -> Content -> Advanced (java, cookie removal..)so block it in first stepNO.50 View the exhibit, which contains the output of a web diagnose command, and then answer the question below.Which one of the following statements explains why the cache statistics are all zeros?  Theadministrator has reallocated the cache memory to a separate process.  There are no users making web requests.  The FortiGuard web filter cache is disabled in the FortiGate’s configuration.  FortiGate is using a flow-based web filter and the cache applies only to proxy-based inspection. NO.51 A corporate network allows Internet Access to FSSO users only. The FSSO user student does not have Internet access after successfully logged into the Windows AD network. The output of the ‘diagnose debug authd fsso list’ command does not show student as an active FSSO user. Other FSSO users can access the Internet without problems. What should the administrator check? (Choose two.)  The user student must not be listed in the CA’s ignore user list.  The user student must belong to one or more of the monitored user groups.  The student workstation’s IP subnet must be listed in the CA’s trusted list.  At least one of thestudent’s user groups must be allowed by a FortiGate firewall policy. Explanationhttps://kb.fortinet.com/kb/documentLink.do?externalID=FD38828NO.52 An LDAP user cannot authenticate against a FortiGate device. Examine the real time debug output shown in the exhibit when the user attempted the authentication; then answer the question below.Based on the output in the exhibit, what can cause this authentication problem?  User student is not found in the LDAP server.  User student is using a wrong password.  The FortiGate has been configured with the wrong password for the LDAP administrator.  The FortiGate has been configured with the wrong authentication schema. NO.53 An administrator cannot connect to the GIU of a FortiGate unit with the IP address 10.0.1.254. The administrator runs thedebug flow while attempting the connection using HTTP. The output of the debug flow is shown in the exhibit:Based on the error displayed by the debug flow, which are valid reasons for this problem? (Choose two.)  HTTP administrative access is disabled in the FortiGate interface with the IP address 10.0.1.254.  Redirection of HTTP to HTTPS administrative access is disabled.  HTTP administrative access is configured with a port number different than 80.  The packet is denied because of reverse path forwarding check. NO.54 Exhibits:Refer to the exhibits, which contain the network topology and BGP configuration for a hub.An administrator is trying to configure ADVPN with a hub-spoke VPN setup using iBGP. All the VPNs are up and connected to the hub. The hub is receiving route information from both spokes over iBGP; however, the spokes are not receiving route information from each other.What change must the administrator make to the hub BGP configuration so that the routes learned by one spoke are forwarded to the other spokes?  Configure an individual neighbor and remove neighbor-range configuration.  Configure the hub as a route reflector client.  Change the router id to 10.1.0.254.  Make the configuration of remote-as different from the configuration of local-as. NO.55 A FortiGate device has the following LDAP configuration:The administrator executed the ‘dsquery’ command in the Windows LDAp server 10.0.1.10, and got the following output:>dsquery user -samid administrator“CN=Administrator, CN=Users, DC=trainingAD, DC=training, DC=lab”Based on the output, what FortiGate LDAP setting is configured incorrectly?  cnid.  username.  password.  dn. https://kb.fortinet.com/kb/viewContent.do?externalId=FD37516NO.56 View the exhibit, which contains the output of a diagnose command, and then answer the question below.What statements are correct regarding the output? (Choose two.)  This is anexpected session created by a session helper.  Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next-hop IP address 10.0.1.10.  Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next-hop IP address 10.200.1.1.  This is an expected session created by an application control profile. NO.57 Examine the output of the ‘get router info ospf neighbor’ command shown in the exhibit; then answer the question below.Which statements are true regarding the output in the exhibit? (Choose two.)Refer to the exhibit, which shows the output of a debug command.Which statement about the output is true?  TheOSPF routers with the IDs 0.0.0.69 and 0.0.0.117 are both designated routers for the war. l network.  The OSPF router with the ID 0.0.0.2 is the designated router for the ToRemote network.  The local FortiGate is the designated router for the wan1 network.  The interface ToRemote is a point-to-point OSPF network. https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/13685-13.htmlNO.58 Examine the IPsec configuration shown in the exhibit; then answer the question below.An administrator wants to monitor the VPN by enabling theIKE real time debug using these commands:diagnose vpn ike log-filter src-addr4 10.0.10.1diagnose debug application ike -1diagnose debug enableThe VPN is currently up, there is no traffic crossing the tunnel and DPD packets are beinginterchanged between both IPsec gateways. However, the IKE real time debug does NOT show any output. Why isn’t there any output?  The IKE real time shows the phases 1 and 2 negotiations only. It does not show any more output once the tunnel is up.  The log-filter setting is set incorrectly. The VPN’s traffic does not match this filter.  The IKE real time debug shows the phase 1 negotiation only. For information after that, the administrator must use the IPsec real time debug instead: diagnose debug application ipsec -1.  The IKE real time debug shows error messages only. If it does not provide any output, it indicates that the tunnel is operating normally. NO.59 Refer to the exhibit, which contains partial output from an IKE real-time debug.Which two statements about this debug output are correct? (Choose two.)  The remote gateway IP address is 10.0.0.1.  The initiator provided remote as its IPsec peer ID.  It shows a phase 1 negotiation.  The negotiation is using AES128 encryption with CBC hash. NO.60 Examine the output ofthe ‘get router info bgp summary’ command shown in the exhibit; then answer the question below.Which statement can explain why the state of the remote BGP peer 10.200.3.1 is Connect?  The local peer is receiving the BGP keepalives from the remote peer but it has not received any BGP prefix yet.  The TCP session for the BGP connection to 10.200.3.1 is down.  The local peer has received the BGP prefixed from the remote peer.  The local peer is receiving the BGP keepalives from the remote peer but it has not received the OpenConfirm yet. Explanationhttp://www.ciscopress.com/articles/article.asp?p=2756480NO.61 Two independent FortiGate HA clusters are connected to the same broadcast domain. The administrator has reported that both clusters are using the same HA virtual MAC address. This creates a duplicated MAC address problem in the network. What HA setting must be changed in one of the HA clusters to fix the problem?  Group ID.  Group name.  Session pickup.  Gratuitous ARPs. https://help.fortinet.com/fos50hlp/54/Content/FortiOS/fortigate-high-availability-52/HA_failoverVMAC.htmNO.62 Examine the following partial output from two system debug commands; then answer the question below.Which of the following statements are true regarding the above outputs? (Choose two.)  The unit is running a 32-bit FortiOS  The unit is in kernel conserve mode  The Cached value is always the Active value plus the Inactive value  Kernel indirectly accesses the low memory (LowTotal) through memorypaging NO.63 View the exhibit, which contains the output of get sys ha status, and then answer the question below.Which statements are correct regarding the output? (Choose two.)  The slave configuration is not synchronized with the master.  The HA management IP is 169.254.0.2.  Master is selected because it is the only device in the cluster.  port 7 is used the HA heartbeat on all devices in the cluster. NO.64 View the exhibit, which contains the output of a real-time debug, Which statement about this output is true?Which of the following statements is true regarding this output?  The requested URL belongs to category ID 255.  The server hostname Is training, fortinet.com.  FortiGate found the requested URL in its local cache.  This web request was inspected using the ftgd-allow web filler profile. NO.65 View the exhibit, which contains the output of a BGP debug command, and then answer the question below.Which ofthe following statements about the exhibit are true? (Choose two.)  The local router’s BGP state is Established with the 10.125.0.60 peer.  Since the counters were last reset; the 10.200.3.1 peer has never been down.  The local router has received atotal of three BGP prefixes from all peers.  The local router has not established a TCP session with 100.64.3.1. NO.66 Which real time debug should an administrator enable to troubleshoot RADIUS authentication problems?  Diagnose debug application radius -1.  Diagnose debug application fnbamd -1.  Diagnose authd console -log enable.  Diagnose radius console -log enable. https://kb.fortinet.com/kb/documentLink.do?externalID=FD32838NO.67 What global configuration setting changes the behavior for content-inspected traffic while FortiGate is in system conserve mode?  av-failopen  mem-failopen  utm-failopen  ips-failopen Explanationhttps://help.fortinet.com/fos50hlp/54/Content/FortiOS/fortigate-security-profiles-54/Other_Profile_Consideration Loading … NSE7_EFW-6.4 certification guide Q&A from Training Expert Exams4sures: https://www.exams4sures.com/Fortinet/NSE7_EFW-6.4-practice-exam-dumps.html --------------------------------------------------- Images: https://free.exams4sures.com/wp-content/plugins/watu/loading.gif https://free.exams4sures.com/wp-content/plugins/watu/loading.gif --------------------------------------------------- --------------------------------------------------- Post date: 2022-11-15 11:39:03 Post date GMT: 2022-11-15 11:39:03 Post modified date: 2022-11-15 11:39:03 Post modified date GMT: 2022-11-15 11:39:03