CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Fortinet
  5. NSE7_EFW-6.4

Free NSE7_EFW-6.4 Exam Braindumps (page: 12)

Page 12 of 26
PDF with 122 Questions

Refer to the exhibit, which contains the partial output of a diagnose command.



Based on the output, which two statements arecorrect? (Choose two.)

  1. Anti-replay is enabled.
  2. DPD is disabled.
  3. Remote gateway IP is 10.200.4.1.
  4. Quick mode selectors are disabled.

Answer(s): A,C



Examine the partial output from the IKE real time debug shown in the exhibit; then answer the question below.

Why didn't the tunnel come up?

  1. IKE mode configuration is not enabled in the remote IPsec gateway.
  2. Theremote gateway's Phase-2 configuration does not match the local gateway's phase- 2 configuration.
  3. The remote gateway's Phase-1 configuration does not match the local gateway's phase- 1 configuration.
  4. One IPsec gateway is using main mode, while theother IPsec gateway is using aggressive mode.

Answer(s): C



View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.



Why didn't the tunnel come up?

  1. The pre-shared keys do not match.
  2. The remote gateway's phase 2configuration does not match the local gateway's phase 2 configuration.
  3. The remote gateway's phase 1 configuration does not match the local gateway's phase 1 configuration.
  4. The remote gateway is using aggressive mode and the local gateway is configured to use man mode.

Answer(s): C



View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.



Which statements about this debug output are correct? (Choose two.)

  1. The remote gateway IP address is 10.0.0.1.
  2. It showsa phase 1 negotiation.
  3. The negotiation is using AES128 encryption with CBC hash.
  4. The initiator has provided remote as its IPsec peer I

Answer(s): B,D



Page 12 of 26



Post your Comments and Discuss Fortinet NSE7_EFW-6.4 exam with other Community members:

Jonathan commented on June 23, 2022
Thank you brain-dumps team. Your exam dump helped me pass the exam.
UNITED STATES
upvote