NSE7_EFW-6.0 Free Practice Test

When using the SSL certificate inspection method for HTTPS traffic, how does FortiGate filter web requests when the browser client does not provide the server name indication (SNI)?

1. A. FortiGate uses the Issued To: field in the server’s certificate.
2. B. FortiGate switches to the full SSL inspection method to decrypt the data.
3. C. FortiGate blocks the request without any further inspection.
4. D. FortiGate uses the requested URL from the user’s web browser.

Correct Answer: A

An administrator has configured the following CLI script on FortiManager, which failed to apply any changes to the managed device after being executed.
<>

1. A. Commands that start with the # sign are not executed.
2. B. CLI scripts will add objects only if they are referenced by policies.
3. C. Incomplete commands are ignored in CLI scripts.
4. D. Static routes can only be added using TCL scripts.

Correct Answer: A
https://help.fortinet.com/fmgr/50hlp/56/5-6-2/FortiManager_Admin_Guide/1000_Device Manager/2400_Sc
A sequence of FortiGate CLI commands, as you would type them at the command line. A comment line starts with the number sign (#). A comment line will not be executed.

View the exhibit, which contains the output of a BGP debug command, and then answer the question below.
<>

1. A. For the peer 10.125.0.60, the BGP state of is Established.
2. B. The local BGP peer has received a total of three BGP prefixes.
3. C. Since the BGP counters were last reset, the BGP peer 10.200.3.1 has never been down.
4. D. The local BGP peer has not established a TCP session to the BGP peer 10.200.3.1.

Correct Answer: AD