NSE7_EFW-6.0 Free Practice Test

View the exhibit, which contains the output of get sys ha status, and then answer the question below.
<>

1. A. The slave configuration is not synchronized with the master.
2. B. The HA management IP is 169.254.0.2.
3. C. Master is selected because it is the only device in the cluster.
4. D. port 7 is used the HA heartbeat on all devices in the cluster.

Correct Answer: AD

View the exhibit, which contains the partial output of an IKE real time debug, and then answer the question below.
<>

1. A. Change phase 1 encryption to AESCBC and authentication to SHA128.
2. B. Change phase 1 encryption to 3DES and authentication to CBC.
3. C. Change phase 1 encryption to AES128 and authentication to SHA512.
4. D. Change phase 1 encryption to 3DES and authentication to SHA256.

Correct Answer: C

Examine the partial output from the IKE real time debug shown in the exhibit; then answer the question below.
<>

1. A. IKE mode configuration is not enabled in the remote IPsec gateway.
2. B. The remote gateway’s Phase-2 configuration does not match the local gateway’s phase-2 configuration.
3. C. The remote gateway’s Phase-1 configuration does not match the local gateway’s phase-1 configuration.
4. D. One IPsec gateway is using main mode, while the other IPsec gateway is using aggressive mode.

Correct Answer: C

View these partial outputs from two routing debug commands:
<>

1. A. Both port1 and port2
2. B. port3
3. C. port1
4. D. port2

Correct Answer: A

Examine the output from the 'diagnose debug authd fsso list' command; then answer the question below.
# diagnose debug authd fsso list —FSSO logons-IP: 192.168.3.1 User: STUDENT Groups: TRAININGAD/USERS Workstation: INTERNAL2. TRAINING. LAB The IP address 192.168.3.1 is
NOT the one used by the workstation INTERNAL2. TRAINING. LAB.
What should the administrator check?

1. A. The IP address recorded in the logon event for the user STUDENT.
2. B. The DNS name resolution for the workstation name INTERNAL2. TRAININ
3. C. LAB.
4. D. The source IP address of the traffic arriving to the FortiGate from the workstation INTERNAL2.TRAININ
5. E. LAB.
6. F. The reserve DNS lookup forthe IP address 192.168.3.1.

Correct Answer: C