FreeFortinetNSE7 _ EFW-7.0 PracticeExamQ&As FortinetNSE7-EnterpriseFirewall7.0 https://www.passcert.com/NSE7_EFW-7.0.html
FreeNSE7 _EFW-7.0PracticeExamFromPasscertforYourBestPreparation 1.Inwhichtwostatesisagivensessioncategorizedasephemeral? (Choosetwo.) A.ATCPsessionwaitingtocompletethethree-wayhandshake. B.ATCPsessionwaitingforFINACK. C.AUDPsessionwithpacketssentandreceived. D.AUDPsessionwithonlyonepacketreceived. Answer:B,D
FreeNSE7 _EFW-7.0PracticeExamFromPasscertforYourBestPreparation
B.SIPALGsupportsSIPHAfailover;SIPhelperdoesnot.
C.SIPALGsupportsSIPoverIPv6;SIPhelperdoesnot.
E.SIPhelpersupportsSIPoverTCPandUDP;SIPALGsupportsonlySIP
D.SIPALGcancreateexpectedsessionsformediatraffic;SIPhelperdoes not.
A.SIPsessionhelperrunsinthekernel;SIPALGrunsasauserspace process.
2.WhichofthefollowingstatementsaretrueregardingtheSIPsessionhelper
andtheSIPapplicationlayergateway(ALG)?(Choosethree.)
overUDP. Answer:ABC
D.Diagnoseradiusconsole–logenable. Answer:B
A.Diagnosedebugapplicationradius-1.
C.Diagnoseauthdconsole–logenable.
B.Diagnosedebugapplicationfnbamd-1.
FreeNSE7 _EFW-7.0PracticeExamFromPasscertforYourBestPreparation 3.Whichrealtimedebugshouldanadministratorenableto troubleshootRADIUSauthenticationproblems?
D.Traffichasbeenidentifiedasfromanapplicationthatisnotallowed.
B.Thenextpacketmustbere-evaluatedagainstthefirewallpolicies.
Answer:B
C.Thesessionmustberemovedfromtheformerprimaryunitafteran HAfailover.
FreeNSE7 _EFW-7.0PracticeExamFromPasscertforYourBestPreparation
4.WhatdoesthedirtyflagmeaninaFortiGatesession?
A.Traffichasbeenblockedbytheantivirusinspection.
FreeNSE7 _EFW-7.0PracticeExamFromPasscertforYourBestPreparation 5.WhatconditionsarerequiredfortwoFortiGatedevicestoforman OSPFadjacency?(Choosethree.) A.IPaddressesareinthesamesubnet. B.Helloanddeadintervalsmatch. C.OSPFIPMTUsmatch. D.OSPFpeerIDsmatch. E.OSPFcostsmatch. Answer:A,B,C
FreeNSE7 _EFW-7.0PracticeExamFromPasscertforYourBestPreparation 6.WhichtwotasksareautomatedusingtheInstallWizardon FortiManager?(Choosetwo.) A.Installingconfigurationchangestomanageddevices B.Importinginterfacemappingsfrommanageddevices C.AddingdevicestoFortiManager D.Previewingpendingconfigurationchangesformanageddevices Answer:A,D
FreeNSE7 _EFW-7.0PracticeExamFromPasscertforYourBestPreparation 7.WhichtwostatementsaboutOCVPNaretrue?(Choosetwo.) A.OnlyrootvdomsupportsOCVPN. B.OCVPNsupportsstaticanddynamicIPsinWANinterface. C.OCVPNoffersonlyHub-SpokeVPNs. D.FortiGatedevicesunderdifferentFortiCareaccountscanbeusedto formOCVPN. Answer:A,B
8.Whichtwostatementsaboutanauxiliarysessionaretrue?(Choose two.)
B.Withtheauxiliarysessionsettingenabled,twosessionswillbe
createdincaseofroutingchange.
D.Withtheauxiliarysessiondisabled,onlyauxiliarysessionswillbe offloaded.
FreeNSE7 _EFW-7.0PracticeExamFromPasscertforYourBestPreparation
C.Withtheauxiliarysessionsettingdisabled,foreachtrafficpath, FortiGatewillusethesameauxiliarysession.
Answer:AB
A.Withtheauxiliarysessionsettingenabled,ECMPtrafficis
acceleratedtotheNP6processor.
FreeNSE7 _EFW-7.0PracticeExamFromPasscertforYourBestPreparation 9.Whichtwoconfigurationsettingschangethebehaviorforcontent-inspected trafficwhileFortiGateisinconservemode?(Choosetwo.) A.IPSfailopen B.memfailopen C.AVfailopen D.UTMfailopen Answer:A,C
FreeNSE7 _EFW-7.0PracticeExamFromPasscertforYourBestPreparation 10.WhendoesaRADIUSserversendanAccess-Challengepacket? A.Theserverdoesnothavetheusercredentialsyet. B.Theserverrequiresmoreinformationfromtheuser,suchasthe tokencodefortwo-factorauthentication. C.Theusercredentialsarewrong. D.Theuseraccountisnotfoundintheserver. Answer:B