NSE7_EFW-6.4 Free Practice Test

View the exhibit, which contains the output of a real-time debug, and then answer the question below.

Which of the following statements is true regarding this output? (Choose two.)

1. A. This web request was inspected using the root web filter profile.
2. B. FortiGate found the requested URL in its local cache.
3. C. The requested URL belongs to category ID 52.
4. D. The web request was allowed by FortiGate.

Correct Answer: BC

View the exhibit, which contains a partial web filter profile configuration, and then answer the question below.

Which action will FortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?

1. A. FortiGate will exempt the connection based on the Web Content Filter configuration.
2. B. FortiGate will block the connection based on the URL Filter configuration.
3. C. FortiGate will allow the connection based on the FortiGuard category based filter configuration.
4. D. FortiGate will block the connection as an invalid URL.

Correct Answer: B
fortigate does it in order Static URL -> FortiGuard – > Content -> Advanced (java, cookie removal..)so block it in first step

View the exhibit, which contains a session entry, and then answer the question below.

Which statement is correct regarding this session?

1. A. It is an ICMP session from 10.1.10.10 to 10.200.1.1.
2. B. It is an ICMP session from 10.1.10.10 to 10.200.5.1.
3. C. It is a TCP session in ESTABLISHED state from 10.1.10.10 to 10.200.5.1.
4. D. It is a TCP session in CLOSE_WAIT state from 10.1.10.10 to 10.200.1.1.

Correct Answer: B

Refer to the exhibit, which contains the output of get system ha status.

Which two statements about the output are true? (Choose two.)

1. A. The slave configuration is synchronized with the master.
2. B. port7 is used as the HA heartbeat on all devices in the cluster.
3. C. Master is selected based on the priority configured under config system ha.
4. D. The HA management IP is 169.254.0.2.

Correct Answer: BC

View the exhibit, which contains the output of a BGP debug command, and then answer the question below.

Which of the following statements about the exhibit are true? (Choose two.)

1. A. The local router's BGP state is Established with the 10.125.0.60 peer.
2. B. Since the counters were last reset; the 10.200.3.1 peer has never been down.
3. C. The local router has received a total of three BGP prefixes from all peers.
4. D. The local router has not established a TCP session with 100.64.3.1.

Correct Answer: AD