NSE7_EFW-7.0 Free Practice Test

View the exhibit, which contains the output of a debug command, and then answer the question below.

Which one of the following statements about this FortiGate is correct?

1. A. It is currently in system conserve mode because of high CPU usage.
2. B. It is currently in extreme conserve mode because of high memory usage.
3. C. It is currently in proxy conserve mode because of high memory usage.
4. D. It is currently in memory conserve mode because of high memory usage.

Correct Answer: D

View the exhibit, which contains the output of diagnose sys session stat, and then answer the question below.

Which statements are correct regarding the output shown? (Choose two.)

1. A. There are 0 ephemeral sessions.
2. B. All the sessions in the session table are TCP sessions.
3. C. No sessions have been deleted because of memory pages exhaustion.
4. D. There are 166 TCP sessions waiting to complete the three-way handshake.

Correct Answer: AC
https://kb.fortinet.com/kb/documentLink.do?externalID=FD40578

View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.

The administrator does not have access to the remote gateway. Based on the debug output, what configuration changes can the administrator make to the local gateway to resolve the phase 1 negotiation error?

1. A. Change phase 1 encryption to 3DES and authentication to SHA128.
2. B. Change phase 1 encryption to AES128 and authentication to SHA512.
3. C. Change phase 1 encryption to AESCBC and authentication to SHA2.
4. D. Change phase 1 encryption to AES256 and authentication to SHA256.

Correct Answer: D

What does the dirty flag mean in a FortiGate session?

1. A. Traffic has been blocked by the antivirus inspection.
2. B. The next packet must be re-evaluated against the firewall policies.
3. C. The session must be removed from the former primary unit after an HA failover.
4. D. Traffic has been identified as from an application that is not allowed.

Correct Answer: B
https://kb.fortinet.com/kb/viewContent.do?externalId=FD40119&sliceId=1

View the exhibit, which contains a screenshot of some phase-1 settings, and then answer the question below.

The VPN is up, and DPD packets are being exchanged between both IPsec gateways; however, traffic cannot pass through the tunnel. To diagnose, the administrator enters these CLI commands:

However, the IKE real time debug does not show any output. Why?

1. A. The debug output shows phases 1 and 2 negotiations onl
2. B. Once the tunnel is up, it does not show any more output.
3. C. The log-filter setting was set incorrectl
4. D. The VPN’s traffic does not match this filter.
5. E. The debug shows only error message
6. F. If there is no output, then the tunnel is operating normally.
7. G. The debug output shows phase 1 negotiation onl
8. H. After that, the administrator must enable the following real time debug: diagnose debug application ipsec -1.

Correct Answer: B