Online Access Free NSE7_EFW Exam Questions

Examine the following traffic log; then answer the question below.
date-20xx-02-01 time=19:52:01 devname=master device_id="xxxxxxx" log_id=0100020007 type=event subtype=system pri critical vd=root service=kemel status=failure msg="NAT port is exhausted." What does the log mean?

• A.The limit for the maximum number of simultaneous sessions sharing the same NAT port has been reached.
• B.FortiGate does not have any available NAT port for a new connection.
• C.There is not enough available memory in the system to create a new entry in the NAT port table.
• D.The limit for the maximum number of entries in the NAT port table has been reached.

Examine the output of the 'diagnose debug rating' command shown in the exhibit; then answer the question below.

Which statement are true regarding the output in the exhibit? (Choose two.)

• A.A server's round trip delay (RTT) is not used to calculate its weight.
• B.The TZ value represents the delta between each FortiGuard server's time zone and the FortiGate's time zone.
• C.There are three FortiGuard servers that are not responding to the queries sent by the FortiGate.
• D.FortiGate will send the FortiGuard queries to the server with highest weight.

An administrator has configured a FortiGate device with two VDOMs: root and internal. The administrator has also created and inter-VDOM link that connects both VDOMs. The objective is to have each VDOM advertise some routes to the other VDOM via OSPF through the inter-VDOM link. What OSPF configuration settings must match in both VDOMs to have the OSPF adjacency successfully forming? (Choose three.)

• A.OSPF interface cost.
• B.OSPF interface area.
• C.OSPF interface MTU.
• D.Interface subnet mask.
• E.Router ID.

An administrator has configured the following CLI script on FortiManager, which failed to apply any changes to the managed device after being executed.

Why didn't the script make any changes to the managed device?

• A.Incomplete commands are ignored in CLI scripts.
• B.Commands that start with the # sign are not executed.
• C.Static routes can only be added using TCL scripts.
• D.CLI scripts will add objects only if they are referenced by policies.

What global configuration setting changes the behavior for content-inspected traffic while FortiGate is in system conserve mode?

• A.utm-failopen
• B.av-failopen
• C.ips-failopen
• D.mem-failopen