Verified NSE7_EFW-7.0 exam dumps Q&As with Correct 165 Questions and Answers [Q96-Q114] : Exam for engine : http://blog.test4engine.com

NEW QUESTION 96
View the exhibit, which contains the output of a real-time debug, and then answer the question below.

Which of the following statements is true regarding this output? (Choose two.)

This web request was inspected using the root web filter profile.

FortiGate found the requested URL in its local cache.

The requested URL belongs to category ID 52.

The web request was allowed by FortiGate.

NEW QUESTION 97
Refer to the exhibit, which contains partial output from an IKE real-time debug.

Based on the debug output, which phase 1 setting is enabled in the configuration of this VPN?

auto-discovery-shortcut

auto-discovery-forwarder

auto-discovery-sender

auto-discovery-receiver

NEW QUESTION 98
Refer to the exhibit, which shows the output of a BGP debug command.

What can be concluded about the router in this scenario?

The router 100.64.3.1 needs to update the local AS number in its BGP configuration in order to bring up the BGP session with the local router.

The State/PfxRcd for neighbor 100.64.3.1 will not change until an administrator on the local router adjusts the inbound route filtering so that prefixes received can be added to the RIB.

All of the neighbors displayed are part of a single BGP configuration on the local router with the neighbor-range set to a value of 4.

The BGP session with peer 10.127.0.75 is up.

NEW QUESTION 99
View the exhibit, which contains a session entry, and then answer the question below.

Which statement is correct regarding this session?

It is an ICMP session from 10.1.10.10 to 10.200.1.1.

It is an ICMP session from 10.1.10.10 to 10.200.5.1.

It is a TCP session in ESTABLISHED state from 10.1.10.10 to 10.200.5.1.

It is a TCP session in CLOSE_WAIT state from 10.1.10.10 to 10.200.1.1.

NEW QUESTION 100
Refer to the exhibit, which contains the output of the diagnose vpn tunnel list.
Which command will capture ESP traffic for the VPN named DialUp_0?

diagnose sniffer packet any ‘esp and host 10.200.3.2’

diagnose sniffer packet any ‘ip proto 50’

diagnose sniffer packet any ‘host 10.0.10.10’

diagnose sniffer packet any ‘port 4500’

NEW QUESTION 101
Exhibits:

Refer to the exhibits, which contain the network topology and BGP configuration for a hub.
An administrator is trying to configure ADVPN with a hub-spoke VPN setup using iBGP. All the VPNs are up and connected to the hub. The hub is receiving route information from both spokes over iBGP; however, the spokes are not receiving route information from each other.
What change must the administrator make to the hub BGP configuration so that the routes learned by one spoke are forwarded to the other spokes?

Configure an individual neighbor and remove neighbor-range configuration.

Configure the hub as a route reflector client.

Change the router id to 10.1.0.254.

Make the configuration of remote-as different from the configuration of local-as.

NEW QUESTION 102
What are two functions of automation stitches? (Choose two.)

Automation stitches can be configured on any FortiGate device in a Security Fabric environment.

An automation stitch configured to execute actions sequentially can take parameters from previous actions as input for the current action.

Automation stitches can be created to run diagnostic commands and attach the results to an email message when CPU or memory usage exceeds specified thresholds.

An automation stitch configured to execute actions in parallel can be set to insert a specific delay between actions.

NEW QUESTION 103
View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.

Why didn’t the tunnel come up?

The pre-shared keys do not match.

The remote gateway’s phase 2 configuration does not match the local gateway’s phase 2 configuration.

The remote gateway’s phase 1 configuration does not match the local gateway’s phase 1 configuration.

The remote gateway is using aggressive mode and the local gateway is configured to use man mode.

NEW QUESTION 104
Refer to the exhibit, which contains the partial output of the get vpn ipsec tunnel details command.

Based on the output, which two statements are correct? (Choose two.)

The npu_flag for this tunnel is 03.

Different SPI values are a result of auto-negotiation being disabled for phase 2 selectors.

Anti-replay is enabled.

The npu_flag for this tunnel is 02.

NEW QUESTION 105
Which statement is true regarding File description (FD) conserve mode?

IPS inspection is affected when FortiGate enters FD conserve mode.

A FortiGate enters FD conserve mode when the amount of available description is less than 5%.

FD conserve mode affects all daemons running on the device.

Restarting the WAD process is required to leave FD conserve mode.

NEW QUESTION 106
Examine the partial output from the IKE real time debug shown in the exhibit; then answer the question below.

Why didn’t the tunnel come up?

IKE mode configuration is not enabled in the remote IPsec gateway.

The remote gateway’s Phase-2 configuration does not match the local gateway’s phase-2 configuration.

The remote gateway’s Phase-1 configuration does not match the local gateway’s phase-1 configuration.

One IPsec gateway is using main mode, while the other IPsec gateway is using aggressive mode.

NEW QUESTION 107
Four FortiGate devices configured for OSPF connected to the same broadcast domain. The first unit is elected as the designated router. The second unit is elected as the backup designated router.
Under normal operation, how many OSPF full adjacencies are formed to each of the other two units?

NEW QUESTION 108
View the exhibit, which contains the output of diagnose sys session list, and then answer the question below.

If the HA ID for the primary unit is zero (0), which statement is correct regarding the output?

This session is for HA heartbeat traffic.

This session is synced with the slave unit.

The inspection of this session has been offloaded to the slave unit.

This session cannot be synced with the slave unit.

NEW QUESTION 109
View the central management configuration shown in the exhibit, and then answer the question below.

Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?

10.0.1.240

One of the public FortiGuard distribution servers

10.0.1.244

10.0.1.242

NEW QUESTION 110
Refer to the exhibit, which shows a partial web filter profile configuration.

Which action will FortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?

FortiGate will block the connection, based on the FortiGuard category based filter configuration.

FortiGate will block the connection as an invalid URL.

FortiGate will exempt the connection, based on the Web Content Filter configuration.

FortiGate will allow the connection, based on the URL Filter configuration.

NEW QUESTION 111
Refer to the exhibits, which show the configuration on FortiGate and partial session information for internet traffic from a user on the internal network.

If the priority on route ID 2 were changed from 10 to 0, what would happen to traffic matching that user session?

The session would remain in the session table, but its traffic would now egress from both port1 and port2.

The session would remain in the session table, and its traffic would egress from port2.

The session would be deleted, and the client would need to start a new session.

The session would remain in the session table, and its traffic would egress from port1.

NEW QUESTION 112
View the exhibit, which contains the output of a BGP debug command, and then answer the question below.

Which of the following statements about the exhibit are true? (Choose two.)

For the peer 10.125.0.60, the BGP state of is Established.

The local BGP peer has received a total of three BGP prefixes.

Since the BGP counters were last reset, the BGP peer 10.200.3.1 has never been down.

The local BGP peer has not established a TCP session to the BGP peer 10.200.3.1.

NEW QUESTION 113
Refer to the exhibit, which contains the output of diagnose sys session list.

If the HA ID for the primary unit is zero (0), which statement about the output is true?

This session cannot be synced with the slave unit.

The inspection of this session has been offloaded to the slave unit.

The master unit is processing this traffic.

This session is for HA heartbeat traffic.

NEW QUESTION 114
What does the dirty flag mean in a FortiGate session?

Traffic has been blocked by the antivirus inspection.

The next packet must be re-evaluated against the firewall policies.

The session must be removed from the former primary unit after an HA failover.

Traffic has been identified as from an application that is not allowed.