[2022] New NSE7_EFW-7.0 exam dumps Use Updated Fortinet Exam [Q51-Q70]

4.2/5 - (4 votes)

[2022] New NSE7_EFW-7.0 exam dumps Use Updated Fortinet Exam

Verified NSE7_EFW-7.0 Dumps Q&As – NSE7_EFW-7.0 Test Engine with Correct Answers

Q51. View the following FortiGate configuration.

All traffic to the Internet currently egresses from port1.
The exhibit shows partial session information for Internet traffic from a user on the internal network:

If the priority on route ID 1 were changed from 5 to 20, what would happen to traffic matching that user’s session?

The session would remain in the session table, and its traffic would still egress from port1.

The session would remain in the session table, but its traffic would now egress from both port1 and port2.

The session would remain in the session table, and its traffic would start to egress from port2.

The session would be deleted, so the client would need to start a new session.

Q52. Refer to the exhibit, which shows the output of a debug command.

Which two statements about the output are true? (Choose two.)

The local FortiGate OSPF router ID is 0.0.0.4.

Port4 is connected to the OSPF backbone area.

In the network connected to port4, two OSPF routers are down.

The local FortiGate is the backup designated router.

Q53. Which two statements about OCVPN are true? (Choose two.)

Only root vdom supports OCVPN.

OCVPN supports static and dynamic IPs in WAN interface.

OCVPN offers only Hub-Spoke VPNs.

FortiGate devices under different FortiCare accounts can be used to form OCVPN.

Q54. Examine the following partial output from a sniffer command; then answer the question below.

What is the meaning of the packets dropped counter at the end of the sniffer?

Number of packets that didn’t match the sniffer filter.

Number of total packets dropped by the FortiGate.

Number of packets that matched the sniffer filter and were dropped by the FortiGate.

Number of packets that matched the sniffer filter but could not be captured by the sniffer.

Q55. An administrator cannot connect to the GIU of a FortiGate unit with the IP address 10.0.1.254. The administrator runs the debug flow while attempting the connection using HTTP.
The output of the debug flow is shown in the exhibit:

Based on the error displayed by the debug flow, which are valid reasons for this problem? (Choose two.)

HTTP administrative access is disabled in the FortiGate interface with the IP address 10.0.1.254.

Redirection of HTTP to HTTPS administrative access is disabled.

HTTP administrative access is configured with a port number different than 80.

The packet is denied because of reverse path forwarding check.

Q56. Examine the output of the ‘get router info ospf interface’ command shown in the exhibit; then answer the question below.

Which statements are true regarding the above output? (Choose two.)

The port4 interface is connected to the OSPF backbone area.

The local FortiGate has been elected as the OSPF backup designated router.

There are at least 5 OSPF routers connected to the port4 network.

Two OSPF routers are down in the port4 network.

Q57. Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.)

IPS failopen

mem failopen

AV failopen

UTM failopen

Q58. Examine the output of the ‘get router info bgp summary’ command shown in the exhibit; then answer the question below.

Which statement can explain why the state of the remote BGP peer 10.200.3.1 is Connect?

The local peer is receiving the BGP keepalives from the remote peer but it has not received any BGP prefix yet.

The TCP session for the BGP connection to 10.200.3.1 is down.

The local peer has received the BGP prefixed from the remote peer.

The local peer is receiving the BGP keepalives from the remote peer but it has not received the OpenConfirm yet.

Q59. What does the dirty flag mean in a FortiGate session?

Traffic has been blocked by the antivirus inspection.

The next packet must be re-evaluated against the firewall policies.

The session must be removed from the former primary unit after an HA failover.

Traffic has been identified as from an application that is not allowed.

Q60. Which statements about bulk configuration changes using FortiManager CLI scripts are correct? (Choose two.)

When executed on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate.

When executed on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate.

When executed on the All FortiGate in ADOM, changes are automatically installed without creating a new revision history.

When executed on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.

Q61. Which two statements about an auxiliary session are true? (Choose two.)

With the auxiliary session setting enabled, ECMP traffic is accelerated to the NP6 processor.

With the auxiliary session setting enabled, two sessions will be created in case of routing change.

With the auxiliary session setting disabled, for each traffic path, FortiGate will use the same auxiliary session.

With the auxiliary session disabled, only auxiliary sessions will be offloaded.

Q62. View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.

Why didn’t the tunnel come up?

The pre-shared keys do not match.

The remote gateway’s phase 2 configuration does not match the local gateway’s phase 2 configuration.

The remote gateway’s phase 1 configuration does not match the local gateway’s phase 1 configuration.

The remote gateway is using aggressive mode and the local gateway is configured to use man mode.

Q63. Refer to the exhibit, which contains the output of get system ha status.

Which two statements about the output are true? (Choose two.)

The slave configuration is synchronized with the master.

port7 is used as the HA heartbeat on all devices in the cluster.

Master is selected based on the priority configured under config system ha.

The HA management IP is 169.254.0.2.

Q64. Which two conditions must be met for a statistic route to be active in the routing table? (Choose two.)

The link health monitor (if configured) is up.

There is no other route, to the same destination, with a higher distance.

The outgoing interface is up.

The next-hop IP address is up.

Q65. Examine the output of the ‘diagnose debug rating’ command shown in the exhibit; then answer the question below.

Which statement are true regarding the output in the exhibit? (Choose two.)

There are three FortiGuard servers that are not responding to the queries sent by the FortiGate.

The TZ value represents the delta between each FortiGuard server’s time zone and the FortiGate’s time zone.

FortiGate will send the FortiGuard queries to the server with highest weight.

A server’s round trip delay (RTT) is not used to calculate its weight.

Q66. An administrator wants to capture ESP traffic between two FortiGates using the built-in sniffer.
If the administrator knows that there is no NAT device located between both FortiGates, what command should the administrator execute?

diagnose sniffer packet any ‘udp port 500’

diagnose sniffer packet any ‘udp port 4500’

diagnose sniffer packet any ‘esp’

diagnose sniffer packet any ‘udp port 500 or udp port 4500’

Q67. An administrator has configured a FortiGate device with two VDOMs: root and internal. The administrator has also created and inter-VDOM link that connects both VDOMs. The objective is to have each VDOM advertise some routes to the other VDOM via OSPF through the inter-VDOM link .
What OSPF configuration settings must match in both VDOMs to have the OSPF adjacency successfully forming? (Choose three.)

Router ID.

OSPF interface area.

OSPF interface cost.

OSPF interface MTU.

Interface subnet mask.

Q68. Examine the output of the ‘diagnose sys session list expectation’ command shown in the exhibit; than answer the question below.

Which statement is true regarding the session in the exhibit?

It was created by the FortiGate kernel to allow push updates from FotiGuard.

It is for management traffic terminating at the FortiGate.

It is for traffic originated from the FortiGate.

It was created by a session helper or ALG.

Q69. View the exhibit, which contains an entry in the session table, and then answer the question below.

Which one of the following statements is true regarding FortiGate’s inspection of this session?

FortiGate applied proxy-based inspection.

FortiGate forwarded this session without any inspection.

FortiGate applied flow-based inspection.

FortiGate applied explicit proxy-based inspection.

Q70. Refer to the exhibit, which contains partial outputs from two routing debug commands.

Why is the port2 default route not in the second command’s output?