Fortinet NSE7_EFW-6.4 Exam Practice Questions (P. 1)
- Full Access (35 questions)
- Six months of Premium Access
- Access to one million comments
- Seamless ChatGPT Integration
- Ability to download PDF files
- Anki Flashcard files for revision
- No Captcha & No AdSense
- Advanced Exam Configuration
Question #1
Which two tasks are automated using the Install Wizard on FortiManager? (Choose two.)
- AInstalling configuration changes to managed devices
- BImporting interface mappings from managed devices
- CAdding devices to FortiManager
- DPreviewing pending configuration changes for managed devices
Correct Answer:
AD
Reference:
https://docs.fortinet.com/document/fortimanager/6.2.0/administration-guide/668612/using-the-install-wizard-to-install-device-settings-only
AD
Reference:
https://docs.fortinet.com/document/fortimanager/6.2.0/administration-guide/668612/using-the-install-wizard-to-install-device-settings-only

send
light_mode
delete
Question #2
Refer to the exhibit, which contains the partial output of the get vpn ipsec tunnel details command.

Based on the output, which two statements are correct? (Choose two.)

Based on the output, which two statements are correct? (Choose two.)
- APhase 2 authentication is set to sha1 on both sides.
- BAnti-replay is disabled.
- CHub2Spoke1 is a policy-based VPN.
- DHub2Spoke1 is configured on interface wan2.
Correct Answer:
AD
AD
send
light_mode
delete
Question #3
Refer to the exhibit, which shows the output of a debug command.

Which two statements about the output are true? (Choose two.)

Which two statements about the output are true? (Choose two.)
- AThe local FortiGate OSPF router ID is 0.0.0.4.
- BPort4 is connected to the OSPF backbone area.
- CIn the network connected to port4, two OSPF routers are down.
- DThe local FortiGate is the backup designated router.
Correct Answer:
AB
Area 0.0.0.0 is the backbone area.
AB
Area 0.0.0.0 is the backbone area.
send
light_mode
delete
Question #4
Refer to the exhibit, which contains the partial output of a diagnose command.

Based on the output, which two statements are correct? (Choose two.)

Based on the output, which two statements are correct? (Choose two.)
- AAnti-replay is enabled
- BThe remote gateway IP is 10.200.4.1.
- CDPD is disabled.
- DQuick mode selectors are disabled.
Correct Answer:
AB
AB
send
light_mode
delete
Question #5
Refer to the exhibit, which contains partial output from an IKE real-time debug.

Which two statements about this debug output are correct? (Choose two.)

Which two statements about this debug output are correct? (Choose two.)
- AThe remote gateway IP address is 10.0.0.1.
- BThe initiator provided remote as its IPsec peer ID.
- CIt shows a phase 1 negotiation.
- DThe negotiation is using AES128 encryption with CBC hash.
Correct Answer:
BC
BC
send
light_mode
delete
All Pages