Online Access Free NSE7_EFW-6.0 Exam Questions

Which statement is true regarding File description (FD) conserve mode?

• A.IPS inspection is affected when FortiGate enters FD conserve mode.
• B.Restarting the WAD process is required to leave FD conserve mode.
• C.A FortiGate enters FD conserve mode when the amount of available description is less than 5%.
• D.FD conserve mode affects all daemons running on the device.

A FortiGate has two default routes:

All Internet traffic is currently using port1. The exhibit shows partial information for one sample session of Internet traffic from an internal user:

What would happen with the traffic matching the above session if the priority on the first default route (IDd1) were changed from 5 to 20?

• A.Session would remain in the session table and its traffic would keep using port1 as the outgoing interface.
• B.Session would be deleted, so the client would need to start a new session.
• C.Session would remain in the session table and its traffic would be shared between port1 and port2.
• D.Session would remain in the session table and its traffic would start using port2 as the outgoing interface.

View the central management configuration shown in the exhibit, and then answer the question below.

Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?

• A.10.0.1.240
• B.10.0.1.244
• C.10.0.1.242
• D.One of the public FortiGuard distribution servers

Examine the following partial outputs from two routing debug commands; then answer the question below.
# get router info kernel
tab=254 vf=0 scope=0type=1 proto=11 prio=0 0.0.0.0/0.0.0.0/0->0.0.0.0/0 pref=0.0.0.0 gwy=10.200.1.254 dev=2(port1) tab=254 vf=0 scope=0type=1 proto=11 prio=10 0.0.0.0/0.0.0.0/0->0.0.0.0/0 pref=0.0.0.0 gwy=10.200.2.254 dev=3(port2) tab=254 vf=0 scope=253type=1 proto=2 prio=0 0.0.0.0/0.0.0.0/.->10.0.1.0/24 pref=10.0.1.254 gwy=0.0.0.0 dev=4(port3)
# get router info routing-table all s*0.0.0.0/0 [10/0] via 10.200.1.254, portl [10/0] via 10.200.2.254, port2,
[10/0] dO.0.1.0/24 is directly connected, port3 dO.200.1.0/24 is directly connected, portl d0.200.2.0/24 is directly connected, port2 Which outbound interface or interfaces will be used by this FortiGate to route web traffic from internal users to the Internet?

• A.Both portl and port2.
• B.port2.
• C.port!
• D.port3.

View the following FortiGate configuration.

All traffic to the Internet currently egresses from port1. The exhibit shows partial session information for Internet traffic from a user on the internal network:

If the priority on route ID 1 were changed from 5 to 20, what would happen to traffic matching that user's session?

• A.The session would remain in the session table, but its traffic would now egress from both port1 and port2.
• B.The session would remain in the session table, and its traffic would start to egress from port2.
• C.The session would remain in the session table, and its traffic would still egress from port1.
• D.The session would be deleted, so the client would need to start a new session.