Online Access Free NSE7 Practice Test

How does FortiManager handle FortiGuard requests from FortiGate devices, when it is configured as a local FDS?

• A.FortiManager can download and maintain local copies of FortiGuard databases.
• B.FortiManager does not support rating requests.
• C.FortiManager supports only FortiGuard push to managed devices.
• D.FortiManager will respond to update requests only if they originate from a managed device.

View the exhibit, which contains the output of get sys ha status, and then answer the question below.

Which statements are correct regarding the output? (Choose two.)

• A.The HA management IP is 169.254.0.2.
• B.The slave configuration is not synchronized with the master.
• C.port 7 is used the HA heartbeat on all devices in the cluster.
• D.Master is selected because it is the only device in the cluster.

An administrator has configured a dial-up IPsec VPN with one phase 2, extended authentication (XAuth) and IKE mode configuration. The administrator has also enabled the IKE real time debug:
diagnose debug application ike-1
diagnose debug enable
In which order is each step and phase displayed in the debug output each time a new dial-up user is connecting to the VPN?

• A.Phase1; IKE mode configuration; phase 2; XAuth.
• B.Phase1; XAuth; phase 2; IKE mode configuration.
• C.Phase1; XAuth; IKE mode configuration; phase2.
• D.Phase1; IKE mode configuration; XAuth; phase 2.

Examine the following partial output from a sniffer command; then answer the question below.

What is the meaning of the packets dropped counter at the end of the sniffer?

• A.Number of packets that didn't match the sniffer filter.
• B.Number of packets that matched the sniffer filter and were dropped by the FortiGate.
• C.Number of packets that matched the sniffer filter but could not be captured by the sniffer.
• D.Number of total packets dropped by the FortiGate.

View the exhibit, which contains a screenshot of some phase-1 settings, and then answer the question below.

The VPN is up, and DPD packets are being exchanged between both IPsec gateways; however, traffic cannot pass through the tunnel. To diagnose, the administrator enters these CLI commands:

However, the IKE real time debug does not show any output. Why?

• A.The debug output shows phase 1 negotiation only. After that, the administrator must enable the following real time debug: diagnose debug application ipsec -1.
• B.The debug shows only error messages. If there is no output, then the tunnel is operating normally.
• C.The debug output shows phases 1 and 2 negotiations only. Once the tunnel is up, it does not show any more output.
• D.The log-filter setting was set incorrectly. The VPN's traffic does not match this filter.