Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Fortinet
  5. NSE7_EFW-6.4

Fortinet NSE7_EFW-6.4 Exam
Fortinet NSE 7 - Enterprise Firewall 6.4 (Page 4 )

Updated On: 12-Feb-2026
Page 4 of 26
PDF with 122 Questions

A FortiGate is configured as an explicit web proxy. Clients using this web proxy are reposting DNS errors when accessing any website. The administrator executes the following debug commands and observes that the n-dns-timeout counter is increasing:



What should the administrator check to fix the problem?

  1. The connectivity between the FortiGate unit and the DNS server.
  2. The connectivity between the client workstations and the DNS server.
  3. That DNS traffic from client workstations is allowed by the explicit web proxy policies.
  4. That DNS service is enabled in the explicit web proxy interface.

Answer(s): A



Which real time debug should an administrator enable to troubleshoot RADIUS authentication problems?

  1. Diagnose debug application radius -1.
  2. Diagnose debug application fnbamd -1.
  3. Diagnose authd console ­log enable.
  4. Diagnose radius console ­log enable.

Answer(s): B

Explanation:

https://kb.fortinet.com/kb/documentLink.do?externalID=FD32838



Examine the output of the `diagnose sys session list expectation' command shown in the exhibit; than answer the question below.



Which statement is true regarding the session in the exhibit?

  1. It was created by the FortiGate kernel to allow push updates from FotiGuard.
  2. It is for management traffic terminating at the FortiGate.
  3. It is for traffic originated from the FortiGate.
  4. It was created by a session helper or ALG.

Answer(s): D



An administrator has configured a FortiGate device with two VDOMs: root and internal. The administrator has also created and inter-VDOM link that connects both VDOMs. The objective is to have each VDOM advertise some routes to the other VDOM via OSPF through the inter-VDOM link.
What OSPF configuration settings must match in both VDOMs to have the OSPF adjacency successfully forming? (Choose three.)

  1. Router ID.
  2. OSPF interface area.
  3. OSPF interface cost.
  4. OSPF interface MTU.
  5. Interface subnet mask.

Answer(s): B,D,E



An administrator has configured a dial-up IPsec VPN with one phase 2, extended authentication (XAuth) and IKE mode configuration. The administrator has also enabled the IKE real time debug:

diagnose debug application ike-1
diagnose debug enable

In which order is each step and phase displayed in the debug output each time a new dial-up user is connecting to the VPN?

  1. Phase1; IKE mode configuration; XAuth; phase 2.
  2. Phase1; XAuth; IKE mode configuration; phase2.
  3. Phase1; XAuth; phase 2; IKE mode configuration.
  4. Phase1; IKE mode configuration; phase 2; XAuth.

Answer(s): B

Explanation:

https://help.fortinet.com/fos50hlp/54/Content/FortiOS/fortigate-ipsecvpn- 54/IPsec_VPN_Concepts/IKE_Packet_Processing.htm






Post your Comments and Discuss Fortinet NSE7_EFW-6.4 exam prep with other Community members:

Join the NSE7_EFW-6.4 Discussion