Free NSE7_EFW-7.0 Exam Braindumps
Fortinet NSE 7 - Enterprise Firewall 7.0 Questions 71–75 (page: 16)

Updated On: 10-Feb-2026

Examine the output of the `get router info bgp summary' command shown in the exhibit; then answer the question below.



Which statement can explain why the state of the remote BGP peer 10.200.3.1 is Connect?

  1. The local peer is receiving the BGP keepalives from the remote peer but it has not received any BGP prefix yet.
  2. The TCP session for the BGP connection to 10.200.3.1 is down.
  3. The local peer has received the BGP prefixed from the remote peer.
  4. The local peer is receiving the BGP keepalives from the remote peer but it has not received the OpenConfirm yet.

Answer(s): B

Explanation:

http://www.ciscopress.com/articles/article.asp?p=2756480&seqNum=4



Examine the output of the `diagnose ips anomaly list' command shown in the exhibit; then answer the question below.



Which IP addresses are included in the output of this command?

  1. Those whose traffic matches a DoS policy.
  2. Those whose traffic matches an IPS sensor.
  3. Those whose traffic exceeded a threshold of a matching DoS policy.
  4. Those whose traffic was detected as an anomaly by an IPS sensor.

Answer(s): A



Examine the partial output from the IKE real time debug shown in the exhibit; then answer the question below.

Why didn't the tunnel come up?

  1. IKE mode configuration is not enabled in the remote IPsec gateway.
  2. The remote gateway's Phase-2 configuration does not match the local gateway's phase-2 configuration.
  3. The remote gateway's Phase-1 configuration does not match the local gateway's phase-1 configuration.
  4. One IPsec gateway is using main mode, while the other IPsec gateway is using aggressive mode.

Answer(s): C



A FortiGate device has the following LDAP configuration:



The LDAP user student cannot authenticate. The exhibit shows the output of the authentication real time debug while testing the student account:



Based on the above output, what FortiGate LDAP settings must the administer check? (Choose two.)

  1. cnid.
  2. username.
  3. password.
  4. dn.

Answer(s): B,C

Explanation:

https://kb.fortinet.com/kb/viewContent.do?externalId=13141



View the central management configuration shown in the exhibit, and then answer the question below.

Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?

  1. 10.0.1.240
  2. One of the public FortiGuard distribution servers
  3. 10.0.1.244
  4. 10.0.1.242

Answer(s): B



Viewing page 16 of 34
Viewing questions 76 - 80 out of 163 questions


Post your Comments and Discuss Fortinet NSE7_EFW-7.0 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!