support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Fortinet
  4. NSE7_EFW-6.4

Free NSE7_EFW-6.4 Exam Braindumps
Fortinet NSE 7 - Enterprise Firewall 6.4 Questions 56–60 (page: 13)

Updated On: 10-Feb-2026
Page 13 of 26
PDF with 122 Questions

View the global IPS configuration, and then answer the question below.



Which of the following statements is true regarding this configuration?

  1. IPS will scan every byte in every session.
  2. FortiGate will spawn IPS engine instances based on the system load.
  3. New packets will be passed through without inspection if the IPS socket buffer runs out of memory.
  4. IPS will use the faster matching algorithm which is only available for units with more than 4 GB memory.

Answer(s): A



View the following FortiGate configuration.



All traffic to the Internet currently egresses from port1. The exhibit shows partial session information for Internet traffic from a user on the internal network:



If the priority on route ID 1 were changed from 5 to 20, what would happen to traffic matching that user's session?

  1. The session would remain in the session table, and its traffic would still egress from port1.
  2. The session would remain in the session table, but its traffic would now egress from both port1 and port2.
  3. The session would remain in the session table, and its traffic would start to egress from port2.
  4. The session would be deleted, so the client would need to start a new session.

Answer(s): A

Explanation:

http://kb.fortinet.com/kb/documentLink.do?externalID=FD40943



View the exhibit, which contains the output of a diagnose command, and then answer the question below.



Which statements are true regarding the output in the exhibit? (Choose two.)

  1. FortiGate will probe 121.111.236.179 every fifteen minutes for a response.
  2. Servers with the D flag are considered to be down.
  3. Servers with a negative TZ value are experiencing a service outage.
  4. FortiGate used 209.222.147.3 as the initial server to validate its contract.

Answer(s): A,D

Explanation:

A ­ because flag is Failed so fortigate will check if server is available every 15 min D-state is I , contact to validate contract info



What does the dirty flag mean in a FortiGate session?

  1. Traffic has been blocked by the antivirus inspection.
  2. The next packet must be re-evaluated against the firewall policies.
  3. The session must be removed from the former primary unit after an HA failover.
  4. Traffic has been identified as from an application that is not allowed.

Answer(s): B

Explanation:

https://kb.fortinet.com/kb/viewContent.do?externalId=FD40119&sliceId=1



The CLI command set intelligent-mode <enable | disable> controls the IPS engine's adaptive scanning behavior.
Which of the following statements describes IPS adaptive scanning?

  1. Determines the optimal number of IPS engines required based on system load.
  2. Downloads signatures on demand from FDS based on scanning requirements.
  3. Determines when it is secure enough to stop scanning session traffic.
  4. Choose a matching algorithm based on available memory and the type of inspection being performed.

Answer(s): C

Explanation:

Configuring IPS intelligence
Starting with FortiOS 5.2, intelligent-mode is a new adaptive detection method. This command is enabled the default and it means that the IPS engine will perform adaptive scanning so that, for some traffic, the FortiGate can quickly finish scanning and offload the traffic to NPU or kernel. It is a balanced method which could cover all known exploits.
When disabled, the IPS engine scans every single byte.
config ips global set intelligent-mode {enable|disable}
end



  PDF
Viewing page 13 of 26
Viewing questions 61 - 65 out of 122 questions


Post your Comments and Discuss Fortinet NSE7_EFW-6.4 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!