Cisco®
CompTIA
Checkpoint
ISC
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk®
Scrum
All Vendors
  2. Home
  3. Exams
  4. Fortinet
  5. NSE7_EFW-6.4

Free NSE7_EFW-6.4 Exam Braindumps (page: 15)

Page 14 of 32
PDF with 122 Questions

View the exhibit, which contains the output of a BGP debug command, and then answer the question below.



Which of the following statements about the exhibit are true? (Choose two.)

  1. For the peer 10.125.0.60, the BGP state of is Established.
  2. The local BGP peer has received a total of three BGP prefixes.
  3. Since the BGP counters were last reset, the BGP peer 10.200.3.1 has never been down.
  4. The local BGP peer has not established a TCP session to the BGP peer 10.200.3.1.

Answer(s): A,D



View the exhibit, which contains the output of a web diagnose command, and then answer the question below.



Which one of the following statements explains why the cache statistics are all zeros?

  1. The administrator has reallocated the cache memory to a separate process.
  2. There are no users making web requests.
  3. The FortiGuard web filter cache is disabled in the FortiGate's configuration.
  4. FortiGate is using a flow-based web filter and the cache applies only to proxy-based inspection.

Answer(s): C



View the exhibit, which contains a partial output of an IKE real-time debug, and then answer the question below.



Based on the debug output, which phase-1 setting is enabled in the configuration of this VPN?

  1. auto-discovery-sender
  2. auto-discovery-forwarder
  3. auto-discovery-shortcut
  4. auto-discovery-receiver

Answer(s): B



View the global IPS configuration, and then answer the question below.



Which of the following statements is true regarding this configuration?

  1. IPS will scan every byte in every session.
  2. FortiGate will spawn IPS engine instances based on the system load.
  3. New packets will be passed through without inspection if the IPS socket buffer runs out of memory.
  4. IPS will use the faster matching algorithm which is only available for units with more than 4 GB memory.

Answer(s): A






Post your Comments and Discuss Fortinet NSE7_EFW-6.4 exam with other Community members:

Exam Discussions & Posts