Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home Fortinet NSE7_EFW-6.4

Fortinet NSE7_EFW-6.4 Exam Practice Questions (P. 3)

  • Full Access (35 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #11
Refer to the exhibit, which contains partial output from an IKE real-time debug.

Based on the debug output, which phase 1 setting is enabled in the configuration of this VPN?
  1. A
    auto-discovery-shortcut
  2. B
    auto-discovery-forwarder
  3. C
    auto-discovery-sender
  4. D
    auto-discovery-receiver

Correct Answer:
C
Reference:
https://docs.fortinet.com/document/fortigate/6.0.0/handbook/320160/example-advpn-configuration

Question #12
Which two statements about OCVPN are true? (Choose two.)
  1. A
    Only root vdom supports OCVPN.
  2. B
    OCVPN supports static and dynamic IPs in WAN interface.
  3. C
    OCVPN offers only Hub-Spoke VPNs.
  4. D
    FortiGate devices under different FortiCare accounts can be used to form OCVPN.

Correct Answer:
AB
Reference:
https://docs.fortinet.com/document/fortigate/6.0.0/cookbook/977344/one-click-vpn-ocvpn https://docs.fortinet.com/document/fortigate/6.2.9/cookbook/496884/overlay-controller-vpn-ocvpn

Question #13
Refer to the exhibit, which shows a central management configuration.

Which server will FortiGate choose for antivirus and IPS updates, if 10.0.1.243 is experiencing an outage?
  1. A
    10.0.1.242
  2. B
    Public FortiGuard servers
  3. C
    10.0.1.240
  4. D
    10.0.1.244

Correct Answer:
B
Reference:
https://kb.fortinet.com/kb/documentLink.do?externalID=FD38219

Question #14
Which two statements about application layer test commands are true? (Choose two.)
  1. A
    They display real-time application debugs.
  2. B
    They are used to filter real-time debugs.
  3. C
    Some of them can be used to restart an application.
  4. D
    Some of them display statistics and configuration information about a feature or process.

Correct Answer:
CD

Question #15
Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.)
  1. A
    mem failopen
  2. B
    IPS failopen
  3. C
    AV failopen
  4. D
    UTM failopen

Correct Answer:
BC
Reference:
https://docs.fortinet.com/document/fortigate/6.0.0/handbook/681934/conserve-mode

Previous Questions Next Questions

All Pages