NSE7_EFW-6.0 Free Practice Test

View the exhibit, which contains a partial web filter profile configuration, and then answer the question below.
< ><>< ><>Which action will FortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?

1. A. FortiGate will exempt the connection based on the Web Content Filter configuration.
2. B. FortiGate will block the connection based on the URL Filter configuration.
3. C. FortiGate will allow the connection based on the FortiGuard category based filter configuration.
4. D. FortiGate will block the connection as an invalid URL.

Correct Answer: B
fortigate does it in order Static URL -> FortiGuard – > Content -> Advanced (java, cookie removal..)so block it in first step

View the exhibit, which contains the output of a diagnose command, and then answer the question below.
<>

1. A. This is an expected session created by a session helper.
2. B. Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next-hop IP address 10.0.1.10.
3. C. Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next-hop IP address 10.200.1.1.
4. D. This is an expected session created by an application control profile.

Correct Answer: AC

Examine the output of the ‘get router info ospf neighbor’ command shown in the exhibit; then answer the question below.
<>

1. A. The interface ToRemote is OSPF network type point-to-point.
2. B. The OSPF router with the ID 0.0.0.2 is the designated router for the ToRemote network.
3. C. The local FortiGate is the backup designated router for the wan1 network.
4. D. The OSPF routers with the IDs 0.0.0.69 and 0.0.0.117 are both designated routers for the wan1 network.

Correct Answer: AC
https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/13685-13.html

View the central management configuration shown in the exhibit, and then answer the question below.
<>

1. A. 10.0.1.240
2. B. One of the public FortiGuard distribution servers
3. C. 10.0.1.244
4. D. 10.0.1.242

Correct Answer: B

An administrator cannot connect to the GIU of a FortiGate unit with the IP address 10.0.1.254. The administrator runs the debug flow while attempting the connection using HTTP. The output of the debug flow is shown in the exhibit:
<>

1. A. HTTP administrative access is disabled in the FortiGate interface with the IP address 10.0.1.254.
2. B. Redirection of HTTP to HTTPS administrative access is disabled.
3. C. HTTP administrative access is configured with a port number different than 80.
4. D. The packet is denied because of reverse path forwarding check.

Correct Answer: AC