NSE7_EFW-6.2 Exam - Free Fortinet Questions and Answers

Question #11 (Topic: Topic 1)

Refer to the exhibit, which contains the output of a debug command.
[Fortinet-NSE7-EFW-6.2-1.0/xmlfile-10_1.png]
Which two statements about the exhibit are true? (Choose two.)

A. The local FortiGate OSPF router ID is 0.0.0.4. B. The local FortiGate is the backup designated router. C. In the network connected to port4, two OSPF routers are down. D. Port4 is connected to the OSPF backbone area.

Answer: AD

Question #12 (Topic: Topic 1)

Refer to the exhibit, which contains the output of diagnose sys session stat.
[Fortinet-NSE7-EFW-6.2-1.0/xmlfile-11_1.png]
Which two statements about the output shown are correct? (Choose two.)

A. No sessions have been deleted because of memory pages exhaustion. B. There are 0 ephemeral sessions. C. There are 168 TCP sessions waiting to complete the three-way handshake. D. All the sessions in the session table are TCP sessions.

Answer: AB

Question #13 (Topic: Topic 1)

Refer to the exhibit, which contains central management configuration.
[Fortinet-NSE7-EFW-6.2-1.0/xmlfile-12_1.jpg]
Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?

A. 10.0.1.242 B. 10.0.1.244 C. Public FortiGuard servers D. 10.0.1.240

Answer: C

Question #14 (Topic: Topic 1)

Refer to the exhibit, which contains the output of diagnose sys session list.
[Fortinet-NSE7-EFW-6.2-1.0/xmlfile-13_1.jpg]
If the HA ID for the primary unit is zero (0), which statement about the output is true?

A. This session cannot be synced with the slave unit. B. The inspection of this session has been offloaded to the slave unit. C. The master unit is processing this traffic. D. This session is for HA heartbeat traffic.

Answer: C

Question #15 (Topic: Topic 1)

Refer to the exhibit, which contains the partial output of an IKE real-time debug.
[Fortinet-NSE7-EFW-6.2-1.0/xmlfile-14_1.png]
Why did the tunnel not come up?

A. The pre-shared keys do not match B. The remote gateway phase 1 configuration does not match the local gateway phase 1 configuration. C. The remote gateway phase 2 configuration does not match the local gateway phase 2 configuration. D. The remote gateway is using aggressive mode and the local gateway is configured to use main mode.

Answer: B

Fortinet NSE7_EFW-6.2 - Fortinet NSE 7 - Enterprise Firewall 6.2 Exam