Online Access Free NSE7_EFW-6.4 Exam Questions

Refer to the exhibit, which contains the debug output of diagnose dvm device list.

Which two statements about the output shown in the exhibit are correct? (Choose two.)

• A.The FortiGate configuration is in sync with latest running revision history.
• B.The policy package has been modified for Local-FortiGate.
• C.ADOMs are disabled on the FortiManager
• D.There are pending device-level changes yet to be installed on Local-FortiGate.

View the exhibit, which contains the output of a debug command, and then answer the question below.

Which of the following statements about the exhibit are true? (Choose two.)

• A.Port4 is connected to the OSPF backbone area.
• B.The local FortiGate's OSPF router ID is 0.0.0.4
• C.In the network on port4, two OSPF routers are down.
• D.The local FortiGate has been elected as the OSPF backup designated router.

A corporate network allows Internet Access to FSSO users only. The FSSO user student does not have Internet access after successfully logged into the Windows AD network. The output of the 'diagnose debug authd fsso list' command does not show student as an active FSSO user. Other FSSO users can access the Internet without problems. What should the administrator check? (Choose two.)

• A.The user student must not be listed in the CA's ignore user list.
• B.At least one of the student's user groups must be allowed by a FortiGate firewall policy.
• C.The user student must belong to one or more of the monitored user groups.
• D.The student workstation's IP subnet must be listed in the CA's trusted list.

The logs in a FSSO collector agent (CA) are showing the following error:
failed to connect to registry: PIKA1026 (192.168.12.232)
What can be the reason for this error?

• A.The remote registry service is not running in the workstation 192.168.12.232.
• B.The CA cannot reach the FortiGate with the IP address 192.168.12.232.
• C.The CA cannot resolve the name of the workstation.
• D.The FortiGate cannot resolve the name of the workstation.

View the exhibit, which contains a session entry, and then answer the question below.

Which statement is correct regarding this session?

• A.It is an ICMP session from 10.1.10.10 to 10.200.5.1.
• B.It is an ICMP session from 10.1.10.10 to 10.200.1.1.
• C.It is a TCP session in ESTABLISHED state from 10.1.10.10 to 10.200.5.1.
• D.It is a TCP session in CLOSE_WAIT state from 10.1.10.10 to 10.200.1.1.