[Jun 16, 2023] NSE7_EFW-6.4 Free Exam Questions with Quality Guaranteed [Q56-Q75]

QUESTION 56
View the exhibit, which contains the output of get sys ha status, and then answer the question below.

Which statements are correct regarding the output? (Choose two.)

QUESTION 57
View the exhibit, which contains the partial output of an IKE real time debug, and then answer the question below.

The administrator does not have access to the remote gateway. Based on the debug output, what configuration changes can the administrator make to the local gateway to resolve the phase 1 negotiation error?

QUESTION 58
An administrator wants to capture ESP traffic between two FortiGates using the built-in sniffer.If the administrator knows that there is no NAT device located between both FortiGates, what command should the administrator execute?

QUESTION 59
In which two states is a given session categorized as ephemeral? (Choose two.)

QUESTION 60
A FortiGate has two default routes:

All Internet traffic is currently using port1. The exhibit shows partial information for one sample session of Internet traffic from an internal user:

What would happen with the traffic matching the above session if the priority on the first default route (IDd1) were changed from 5 to 20?

QUESTION 61
The logs in a FSSO collector agent (CA) are showing the following error:
failed to connect to registry: PIKA1026 (192.168.12.232)
What can be the reason for this error?

QUESTION 62
Examine the IPsec configuration shown in the exhibit; then answer the question below.

An administrator wants to monitor the VPN by enabling the IKE real time debug using these commands:
diagnose vpn ike log-filter src-addr4 10.0.10.1
diagnose debug application ike -1
diagnose debug enable
The VPN is currently up, there is no traffic crossing the tunnel and DPD packets are being interchanged between both IPsec gateways. However, the IKE real time debug does NOT show any output. Why isn’t there any output?

QUESTION 63
When using the SSL certificate inspection method for HTTPS traffic, how does FortiGate filter web requests when the browser client does not provide the server name indication (SNI) extension?

QUESTION 64
Refer to the exhibit, which contains the partial output of the get vpn ipsec tunnel details command.

Based on the output, which two statements are correct? (Choose two.)

QUESTION 65
Examine the output of the ‘get router info bgp summary’ command shown in the exhibit; then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

QUESTION 66
View the exhibit, which contains an entry in the session table, and then answer the question below.

Which one of the following statements is true regarding FortiGate’s inspection of this session?

QUESTION 67
View the exhibit, which contains the output of a debug command, and then answer the question below.

Which one of the following statements about this FortiGate is correct?

QUESTION 68
View the exhibit, which contains a partial web filter profile configuration, and then answer the question below.

Which action willFortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?

QUESTION 69
A FortiGate device has the following LDAP configuration:

The LDAP user student cannot authenticate. The exhibit shows the output of the authentication real time debug while testing the student account:

Based on the above output, what FortiGate LDAP settings must the administer check? (Choose two.)

QUESTION 70
The CLI command set intelligent-mode <enable | disable> controls the IPS engine’s adaptivescanning behavior. Which of the following statements describes IPS adaptive scanning?

QUESTION 71
View the exhibit, which contains the output of a web diagnose command, and then answer the question below.

Which one of the following statements explains why the cache statistics are all zeros?

QUESTION 72
What conditions are required for two FortiGate devices to form an OSPF adjacency? (Choose three.)

QUESTION 73
Examine the output of the ‘get router info ospfneighbor’ command shown in the exhibit; then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

QUESTION 74
Which statement about the designated router (DR) and backup designated router (BDR) in an OSPF multi-access network is true?

QUESTION 75
Which two statements about bulk configuration changes made using FortiManager CLI scripts are correct? (Choose two.)