Cisco®
CompTIA
Checkpoint
ISC
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk®
Scrum
All Vendors
  2. Home
  3. Exams
  4. Fortinet
  5. NSE7_EFW-6.4

Free NSE7_EFW-6.4 Exam Braindumps (page: 9)

Page 8 of 32
PDF with 122 Questions

Examine the output from the `diagnose vpn tunnel list' command shown in the exhibit; then answer the question below.



Which command can be used to sniffer the ESP traffic for the VPN DialUP_0?

  1. diagnose sniffer packet any `port 500'
  2. diagnose sniffer packet any `esp'
  3. diagnose sniffer packet any `host 10.0.10.10'
  4. diagnose sniffer packet any `port 4500'

Answer(s): D

Explanation:

NAT-T is enabled. natt: mode=silent
Protocol ESP is used. ESP is encapsulated in UDP port 4500 when NAT-T is enabled.

natt: mode=silent means IPSec is behind NAT (NAT traversal) https://kb.fortinet.com/kb/documentLink.do?externalID=FD48755



View the central management configuration shown in the exhibit, and then answer the question below.

Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?

  1. 10.0.1.240
  2. One of the public FortiGuard distribution servers
  3. 10.0.1.244
  4. 10.0.1.242

Answer(s): B



View the exhibit, which contains the output of diagnose sys session stat, and then answer the question below.



Which statements are correct regarding the output shown? (Choose two.)

  1. There are 0 ephemeral sessions.
  2. All the sessions in the session table are TCP sessions.
  3. No sessions have been deleted because of memory pages exhaustion.
  4. There are 166 TCP sessions waiting to complete the three-way handshake.

Answer(s): A,C

Explanation:

https://kb.fortinet.com/kb/documentLink.do?externalID=FD40578



View the exhibit, which contains the output of a debug command, and then answer the question below.



What statement is correct about this FortiGate?

  1. It is currently in system conserve mode because of high CPU usage.
  2. It is currently in FD conserve mode.
  3. It is currently in kernel conserve mode because of high memory usage.
  4. It is currently in system conserve mode because of high memory usage.

Answer(s): D






Post your Comments and Discuss Fortinet NSE7_EFW-6.4 exam with other Community members:

Exam Discussions & Posts