[Sep-2023] Fortinet NSE7_EFW-7.0 Test Engine PDF - All Free Dumps from Test4Engine [Q78-Q94] : Exam for engine : http://blog.test4engine.com

NO.78 Which two conditions would prevent a static route from being added to the routing table? (Choose two.)

There is another other route to the same destination, with a lower distance.

The route has a lower priority value than another route to the same destination.

The next-hop IP address is unreachable.

The interface specified in the route configuration is down

NO.79 An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage. However, after the changes, one network application started to have problems. During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before the arrival of the SYN/ACKs. When the SYN/ACK packets arrive to the FortiGate, the unit has already deleted the respective sessions. Which TCP session timer must be increased to fix this problem?

TCP half open.

TCP half close.

TCP time wait.

TCP session time to live.

NO.80 Refer to the exhibit, which contains a TCL script configuration on FortiManager.
An administrator has configured the TCL script on FortiManager, but the TCL script failed to apply any changes to the managed device after being run.

Why did the TCL script fail to make any changes to the managed device?

The TCL command run_cmd has not been created.

The TCL script must start with tinclude <>.

Incomplete commands are ignored in TCL scripts.

Changes to an interface configuration can be made only by a CLI script.

NO.81 The logs in a FSSO collector agent (CA) are showing the following error:
failed to connect to registry: PIKA1026 (192.168.12.232)
What can be the reason for this error?

The CA cannot resolve the name of the workstation.

The FortiGate cannot resolve the name of the workstation.

The remote registry service is not running in the workstation 192.168.12.232.

The CA cannot reach the FortiGate with the IP address 192.168.12.232.

NO.82 Which statement is true regarding File description (FD) conserve mode?

IPS inspection is affected when FortiGate enters FD conserve mode.

A FortiGate enters FD conserve mode when the amount of available description is less than 5%.

FD conserve mode affects all daemons running on the device.

Restarting the WAD process is required to leave FD conserve mode.

NO.83 View the central management configuration shown in the exhibit, and then answer the question below.

Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?

10.0.1.240

One of the public FortiGuard distribution servers

10.0.1.244

10.0.1.242

NO.84 Examine the partial output from two web filter debug commands; then answer the question below:

Based on the above outputs, which is the FortiGuard web filter category for the web site www.fgt99.com?

Finance and banking

General organization.

Business.

Information technology.

NO.85 Refer to the exhibit, which shows a partial routing table.

Assuming all the appropriate firewall policies are configured, which two pings will FortiGate route? (Choose two.)

Source IP address: 10.1.0.10. Destination IP address: 10.64.1.52

Source IPaddress: 10.72.3.52. Destination IP address: 10.1.0.254

Source IPaddress: 10.10.4.24, Destination IPaddress: 10.72.3.20

Source IPaddress: 10.73.9.10, Destination IPaddress: 10.72.3.15

NO.86 Examine the output of the ‘diagnose ips anomaly list’ command shown in the exhibit; then answer the question below.

Which IP addresses are included in the output of this command?

Those whose traffic matches a DoS policy.

Those whose traffic matches an IPS sensor.

Those whose traffic exceeded a threshold of a matching DoS policy.

Those whose traffic was detected as an anomaly by an IPS sensor.

NO.87 An administrator has configured two FortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device. The administrator decides to enable the setting link-failed-signal to fix the problem.
Which statement about this setting is true?

It sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.

It sends a link failed signal to all connected devices.

It disabled all the non-heartbeat interfaces in all HA members for two seconds after a failover.

It forces the former primary device to shut down all its non-heartbeat interfaces for one second, while the failover occurs.

NO.88 Which of the following statements are true regarding the SIP session helper and the SIP application layer gateway (ALG)? (Choose three.)

SIP session helper runs in the kernel; SIP ALG runs as a user space process.

SIP ALG supports SIP HA failover; SIP helper does not.

SIP ALG supports SIP over IPv6; SIP helper does not.

SIP ALG can create expected sessions for media traffic; SIP helper does not.

SIP helper supports SIP over TCP and UDP; SIP ALG supports only SIP over UDP.

NO.89 Refer to the exhibit, which contains partial outputs from two routing debug commands.

Why is the port2 default route not in the second command’s output?

It has a higher priority value than the default route using port1.

It is disabled in the FortiGate configuration.

It has a lower priority value than the default route using port1.

It has a higher distance than the default route using port1.

NO.90 Examine the output from the BGP real time debug shown in the exhibit, then the answer the question below:

Which statements are true regarding the output in the exhibit? (Choose two.)

BGP peers have successfully interchanged Open and Keepalive messages.

Local BGP peer received a prefix for a default route.

The state of the remote BGP peer is OpenConfirm.

The state of the remote BGP peer will go to Connect after it confirms the received prefixes.

NO.91 View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.

Why didn’t the tunnel come up?

The pre-shared keys do not match.

The remote gateway’s phase 2 configuration does not match the local gateway’s phase 2 configuration.

The remote gateway’s phase 1 configuration does not match the local gateway’s phase 1 configuration.

The remote gateway is using aggressive mode and the local gateway is configured to use man mode.

NO.92 Refer to the exhibit, which contains the partial output of a diagnose command.

Based on the output, which two statements are correct? (Choose two.)

Anti-replay is enabled.

DPD is disabled.

Remote gateway IP is 10.200.4.1.

Quick mode selectors are disabled.

NO.93 Which of the following statements are correct regarding application layer test commands? (Choose two.)

They are used to filter real-time debugs.

They display real-time application debugs.

Some of them display statistics and configuration information about a feature or process.

Some of them can be used to restart an application.

NO.94 An administrator has enabled HA session synchronization in a HA cluster with two members .
Which flag is added to a primary unit’s session to indicate that it has been synchronized to the secondary unit?

redir.

dirty.

synced

nds.