NSE7_EFW-7.0 Exam Question 56

View the exhibit, which contains the output of a debug command, and then answer the question below.

Which of the following statements about the exhibit are true? (Choose two.)
  • NSE7_EFW-7.0 Exam Question 57

    Examine the output from the 'diagnose debug authd fsso list' command; then answer the question below.
    diagnose debug authd fsso list -FSSO logons-IP: 192.168.3.1 User: STUDENT Groups: TRAININGAD/USERS Workstation: INTERNAL2. TRAINING. LAB The IP address 192.168.3.1 is NOT the one used by the workstation INTERNAL2. TRAINING. LAB.
    What should the administrator check?
  • NSE7_EFW-7.0 Exam Question 58

    Refer to the exhibit, which contains the partial output of a diagnose command.

    Based on the output, which two statements are correct? (Choose two.)
  • NSE7_EFW-7.0 Exam Question 59

    An administrator has configured two FortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device. The administrator decides to enable the setting link-failed-signal to fix the problem.
    Which statement about this setting is true?
  • NSE7_EFW-7.0 Exam Question 60

    An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage. However, after the changes, one network application started to have problems. During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before the arrival of the SYN/ACKs. When the SYN/ACK packets arrive to the FortiGate, the unit has already deleted the respective sessions. Which TCP session timer must be increased to fix this problem?