NSE7_EFW-6.4 Exam Question 16
Which of the following statements are true regardingthe SIP session helper and the SIP application layer gateway (ALG)? (Choose three.)
NSE7_EFW-6.4 Exam Question 17
View the exhibit, which contains a screenshot of some phase-1settings, and then answer the question below.

The VPN is up, and DPD packets are being exchanged between both IPsec gateways; however, traffic cannot pass through the tunnel. To diagnose, the administrator enters these CLI commands:

However, the IKE real time debug does not show any output. Why?

The VPN is up, and DPD packets are being exchanged between both IPsec gateways; however, traffic cannot pass through the tunnel. To diagnose, the administrator enters these CLI commands:

However, the IKE real time debug does not show any output. Why?
NSE7_EFW-6.4 Exam Question 18
View the exhibit, which contains the output of a debug command, and then answer the question below.

Which of the following statements about the exhibit are true? (Choose two.)

Which of the following statements about the exhibit are true? (Choose two.)
NSE7_EFW-6.4 Exam Question 19
An administrator wants to capture ESP traffic between two FortiGates using the built-in sniffer. If the administrator knows that there is no NAT device located between both FortiGates, what command should the administrator execute?
NSE7_EFW-6.4 Exam Question 20
Which the following events can trigger the election of a new primary unit in a HA cluster? (Choose two.)