QUESTION: 9

Examine the output of the `diagnose sys session list expectation' command shown in the exhibit; than answer the question below.

Which statement is true regarding the session in the exhibit?

It was created by the FortiGate kernel to allow push updates from FotiGuard.
It is for managementtraffic terminating at the FortiGate.
It is for traffic originated from the FortiGate.
It was created by a session helper or ALG.

Answer(s): D

Reveal Solution Next Question

An administrator cannot connect to the GIU of a FortiGate unit with the IP address
10.0.1.254. The administrator runs thedebug flow while attempting the connection using HTTP. The output of the debug flow is shown in the exhibit:

Based on the error displayed by the debug flow, which are valid reasons for this problem? (Choose two.)

HTTP administrative access is disabled in the FortiGate interface with the IP address
10.0.1.254.
Redirection of HTTP to HTTPS administrative access is disabled.
HTTP administrative access is configured with a port number different than 80.
The packet is denied because of reverse path forwarding check.

Answer(s): A,C

Reveal Solution Next Question

QUESTION: 11

A FortiGate is configured as an explicit web proxy. Clients using this web proxy are reposting DNS errors when accessing any website. Theadministrator executes the following debug commands and observes that the n-dns-timeout counter is increasing:

What should the administrator check to fix the problem?

The connectivity between the FortiGate unit and the DNS server.
Theconnectivity between the client workstations and the DNS server.
That DNS traffic from client workstations is allowed by the explicit web proxy policies.
That DNS service is enabled in the explicit web proxy interface.

Answer(s): A

Reveal Solution Next Question

QUESTION: 12

View the exhibit, which contains the partial output of an IKE real time debug, and then answerthe question below.

The administrator does not have access to the remote gateway. Based on the debug output, what configuration changes can the administrator make to the local gateway to resolve the phase 1 negotiation error?

Change phase 1encryption to AESCBC and authentication to SHA128.
Change phase 1 encryption to 3DES and authentication to CBC.
Change phase 1 encryption to AES128 and authentication to SHA512.
Change phase 1 encryption to 3DES and authentication to SHA256.

Answer(s): B

Reveal Solution Next Question

Free NSE7_EFW-6.4 Exam Braindumps (page: 3)

QUESTION: 9

QUESTION: 10

QUESTION: 11

QUESTION: 12