Online Access Free NSE7_EFW-6.0 Practice Test

Examine the following partial outputs from two routing debug commands; then answer the question below:

Why the default route using port2 is not displayed in the output of the second command?

• A.It has a higher priority than the default route using port1.
• B.It has a lower priority than the default route using port1.
• C.It is disabled in the FortiGate configuration.
• D.It has a higher distance than the default route using port1.

When using the SSL certificate inspection method for HTTPS traffic, how does FortiGate filter web requests when the browser client does not provide the server name indication (SNI)?

• A.FortiGate uses the Issued To: field in the server's certificate.
• B.FortiGate blocks the request without any further inspection.
• C.FortiGate switches to the full SSL inspection method to decrypt the data.
• D.FortiGate uses the requested URL from the user's web browser.

View the exhibit, which contains the output of a diagnose command, and then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

• A.FortiGate used 209.222.147.3 as the initial server to validate its contract.
• B.FortiGate will probe 121.111.236.179 every fifteen minutes for a response.
• C.Servers with a negative TZ value are experiencing a service outage.
• D.Servers with the D flag are considered to be down.

View the exhibit, which contains a partial routing table, and then answer the question below.

Assuming all the appropriate firewall policies are configured, which of the following pings will FortiGate route? (Choose two.)

• A.Source IP address 10.72.3.27, Destination IP address 10.1.0.52.
• B.Source IP address 10.72.3.52, Destination IP address 10.1.0.254.
• C.Source IP address 10.73.9.10, Destination IP address 10.72.3.15.
• D.Source IP address 10.1.0.24, Destination IP address 10.72.3.20.

What is the purpose of an internal segmentation firewall (ISFW)?

• A.It is the first line of defense at the network perimeter.
• B.It splits the network into multiple security segments to minimize the impact of breaches.
• C.It is an all-in-one security appliance that is placed at remote sites to extend the enterprise network.
• D.It inspects incoming traffic to protect services in the corporate DMZ.