NSE7 Free Practice Test

A FortiGate is configured as an explicit web proxy. Clients using this web proxy are reposting DNS errors when accessing any website. The administrator executes the following debug commands and observes that the n-dns-timeout counter is increasing:

What should the administrator check to fix the problem?

1. A. The connectivity between the FortiGate unit and the DNS server.
2. B. The connectivity between the client workstations and the DNS server.
3. C. That DNS traffic from client workstations is allowed by the explicit web proxy policies.
4. D. That DNS service is enabled in the explicit web proxy interface.

Correct Answer: AB

What events are recorded in the crashlogs of a FortiGate device? (Choose two.)

1. A. A process crash.
2. B. Configuration changes.
3. C. Changes in the status of any of the FortiGuard licenses.
4. D. System entering to and leaving from the proxy conserve mode.

Correct Answer: AD

A FortiGate has two default routes:

All Internet traffic is currently using port1. The exhibit shows partial information for one sample session of Internet traffic from an internal user:

What would happen with the traffic matching the above session if the priority on the first default route (IDd1) were changed from 5 to 20?

1. A. Session would remain in the session table and its traffic would keep using port1 as the outgoing interface.
2. B. Session would remain in the session table and its traffic would start using port2 as the outgoing interface.
3. C. Session would be deleted, so the client would need to start a new session.
4. D. Session would remain in the session table and its traffic would be shared between port1 and port2.

Correct Answer: A

View the exhibit, which contains the output of get sys ha status, and then answer the question below.

Which statements are correct regarding the output? (Choose two.)

1. A. The slave configuration is not synchronized with the master.
2. B. The HA management IP is 169.254.0.2.
3. C. Master is selected because it is the only device in the cluster.
4. D. port 7 is used the HA heartbeat on all devices in the cluster.

Correct Answer: AC

What is the purpose of an internal segmentation firewall (ISFW)?

1. A. It inspects incoming traffic to protect services in the corporate DMZ.
2. B. It is the first line of defense at the network perimeter.
3. C. It splits the network into multiple security segments to minimize the impact of breaches.
4. D. It is an all-in-one security appliance that is placed at remote sites to extend the enterprise network.

Correct Answer: B