NSE7_EFW-6.4 V2

View the central management configuration shown in the exhibit, and then answer the question below. Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?A . 10.0.1.240 B. One of the public FortiGuard distribution servers C. 10.0.1.244 D. 10.0.1.242View AnswerAnswer: B

Refer to the exhibit, which contains partial output from an IKE real-time debug. Based on the debug output, which phase 1 setting is enabled in the configuration of this VPN?A . auto-discovery-shortcut B. auto-discovery-forwarder C. auto-discovery-sender D. auto-discovery-receiverView AnswerAnswer: D Explanation: Reference: https://docs.fortinet.com/document/fortigate/6.0.0/handbook/320160/example-advpn-configuration First the Spoke receives SHORTCUT_OFFER, it respondes...

View the exhibit, which contains the output of get sys ha status, and then answer the question below. Which statements are correct regarding the output? (Choose two.)A . The slave configuration is not synchronized with the master. B. The HA management IP is 169.254.0.2. C. Master is selected because it...

Examine the output from the BGP real time debug shown in the exhibit, then the answer the question below: Which statements are true regarding the output in the exhibit? (Choose two.)A . BGP peers have successfully interchanged Open and Keepalive messages. B. Local BGP peer received a prefix for a...

View the exhibit, which contains the output of a diagnose command, and then answer the question below. What statements are correct regarding the output? (Choose two.)A . This is an expected session created by a session helper. B. Traffic in the original direction (coming from the IP address 10.171.122.38) will...

View the exhibit, which contains the output of a debug command, and then answer the question below. Which one of the following statements about this FortiGate is correct?A . It is currently in system conserve mode because of high CPU usage. B. It is currently in extreme conserve mode because...

A FortiGate has two default routes: All Internet traffic is currently using port1. The exhibit shows partial information for one sample session of Internet traffic from an internal user: What would happen with the traffic matching the above session if the priority on the first default route (IDd1) were changed...

Which of the following statements are correct regarding application layer test commands? (Choose two.)A . They are used to filter real-time debugs. B. They display real-time application debugs. C. Some of them display statistics and configuration information about a feature or process. D. Some of them can be used to...

Which statement about memory conserve mode is true?A . A FortiGate exits conserve mode when the configured memory use threshold reaches yellow. B. A FortiGate starts dropping all the new and old sessions when the configured memory use threshold reaches extreme. C. A FortiGate starts dropping new sessions when the...

Examine the output of the ‘diagnose ips anomaly list’ command shown in the exhibit; then answer the question below. Which IP addresses are included in the output of this command?A . Those whose traffic matches a DoS policy. B. Those whose traffic matches an IPS sensor. C. Those whose traffic...