Online Access Free NSE7_EFW Exam Questions

An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator noticed that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link-failed-signal to fix the problem. Which statement is correct regarding this command?

• A.Sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.
• B.Sends a link failed signal to all connected devices.
• C.Forces the former primary device to shut down all its non-heartbeat interfaces for one second while the failover occurs.
• D.Disables all the non-heartbeat interfaces in all the HA members for two seconds after a failover.

View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.

Why didn't the tunnel come up?

• A.The remote gateway's phase 2 configuration does not match the local gateway's phase 2 configuration.
• B.The pre-shared keys do not match.
• C.The remote gateway is using aggressive mode and the local gateway is configured to use man mode.
• D.The remote gateway's phase 1 configuration does not match the local gateway's phase 1 configuration.

View the exhibit, which contains the output of a real-time debug, and then answer the question below.

Which of the following statements is true regarding this output? (Choose two.)

• A.The web request was allowed by FortiGate.
• B.This web request was inspected using the root web filter profile.
• C.The requested URL belongs to category ID 52.
• D.FortiGate found the requested URL in its local cache.

Examine the following partial outputs from two routing debug commands; then answer the question below:

Why the default route using port2 is not displayed in the output of the second command?

• A.It is disabled in the FortiGate configuration.
• B.It has a higher distance than the default route using port1.
• C.It has a lower priority than the default route using port1.
• D.It has a higher priority than the default route using port1.

View the exhibit, which contains the output of a web diagnose command, and then answer the question below.

Which one of the following statements explains why the cache statistics are all zeros?

• A.FortiGate is using a flow-based web filter and the cache applies only to proxy-based inspection.
• B.The administrator has reallocated the cache memory to a separate process.
• C.There are no users making web requests.
• D.The FortiGuard web filter cache is disabled in the FortiGate's configuration.