Cisco®
Oracle
CompTIA
Checkpoint
ISC
EC-Council
EXIN
Fortinet
ITIL®
Juniper
Microsoft
VMware
Avaya
SAP
Google
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk®
All Vendors
  2. Home
  3. Exams
  4. Fortinet
  5. NSE7_EFW-6.4

Free Fortinet NSE7_EFW-6.4 Exam Questions (page: 9)

Page 6 of 32
PDF with 122 Questions

When does a RADIUS server send an Access-Challenge packet?

  1. The server does not have the user credentials yet.
  2. The server requires more information from the user, such as the token code for two-factor authentication.
  3. The user credentials are wrong.
  4. The user account is not found in the server.

Answer(s): B



The logs in a FSSO collector agent (CA) are showing the following error:

failed to connect to registry: PIKA1026 (192.168.12.232)

What can be the reason for this error?

  1. The CA cannot resolve the name of the workstation.
  2. The FortiGate cannot resolve the name of the workstation.
  3. The remote registry service is not running in the workstation 192.168.12.232.
  4. The CA cannot reach the FortiGate with the IP address 192.168.12.232.

Answer(s): C

Explanation:

https://kb.fortinet.com/kb/documentLink.do?externalID=FD30548



Examine the output of the `get router info ospf neighbor' command shown in the exhibit; then answer the question below.



Which statements are true regarding the output in the exhibit? (Choose two.)

Refer to the exhibit, which shows the output of a debug command.
Which statement about the output is true?

  1. TheOSPF routers with the IDs 0.0.0.69 and 0.0.0.117 are both designated routers for the war. l network.
  2. The OSPF router with the ID 0.0.0.2 is the designated router for the ToRemote network.
  3. The local FortiGate is the designated router for the wan1 network.
  4. The interface ToRemote is a point-to-point OSPF network.

Answer(s): D

Explanation:

https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/13685-13.html



A FortiGate has two default routes:



All Internet traffic is currently using port1. The exhibit shows partial information for one sample session of Internet traffic from an internal user:



What would happen with the traffic matching the above session if the priority on the first default route (IDd1) were changed from 5 to 20?

  1. The session would be deleted, and the client would need to start a new session.
  2. The session would remain in the session table, and its traffic would start to egress from port2.
  3. The session would remain in the session table, but its traffic would now egress from both port1 and port2.
  4. The session would remain in the session table, and its traffic would still egress from port1.

Answer(s): D



Viewing page 9 of 32



Post your Comments and Discuss Fortinet NSE7_EFW-6.4 exam prep with other Community members:

NSE7_EFW-6.4 Exam Discussions & Posts