Online Access Free NSE7_EFW-6.2 Exam Questions

What events are recorded in the crashlogs of a FortiGate device? (Choose two.)

• A.Configuration changes.
• B.System entering to and leaving from the proxy conserve mode.
• C.Changes in the status of any of the FortiGuard licenses.
• D.A process crash.

Which statement about memory conserve mode is true?

• A.A FortiGate starts dropping new sessions when the configured memory use threshold reaches red
• B.A FortiGate starts dropping all the new and old sessions when the configured memory use threshold reaches extreme.
• C.A FortiGate enters conserve mode when the configured memory use threshold reaches red
• D.A FortiGate exits conserve mode when the configured memory use threshold reaches yellow.

An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator noticed that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link-failed-signal to fix the problem. Which statement is correct regarding this command?

• A.Sends a link failed signal to all connected devices.
• B.Forces the former primary device to shut down all its non-heartbeat interfaces for one second while the failover occurs.
• C.Sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.
• D.Disables all the non-heartbeat interfaces in all the HA members for two seconds after a failover.

An administrator has configured a FortiGate device with two VDOMs: root and internal. The administrator has also created and inter-VDOM link that connects both VDOMs. The objective is to have each VDOM advertise some routes to the other VDOM via OSPF through the inter-VDOM link. What OSPF configuration settings must match in both VDOMs to have the OSPF adjacency successfully forming? (Choose three.)

• A.OSPF interface MTU.
• B.Interface subnet mask.
• C.OSPF interface cost.
• D.OSPF interface area.
• E.Router ID.

Which of the following statements are true regarding the SIP session helper and the SIP application layer gateway (ALG)? (Choose three.)

• A.SIP helper supports SIP over TCP and UDP; SIP ALG supports only SIP over UDP.
• B.SIP ALG supports SIP over IPv6; SIP helper does not.
• C.SIP session helper runs in the kernel; SIP ALG runs as a user space process.
• D.SIP ALG supports SIP HA failover; SIP helper does not.
• E.SIP ALG can create expected sessions for media traffic; SIP helper does not.