Online Access Free NSE7_EFW-6.2 Practice Test

An administrator added the following Ipsec VPN to a FortiGate configuration:
configvpn ipsec phasel -interface
edit "RemoteSite"
set type dynamic
set interface "portl"
set mode main
set psksecret ENC LCVkCiK2E2PhVUzZe
next
end
config vpn ipsec phase2-interface
edit "RemoteSite"
set phasel name "RemoteSite"
set proposal 3des-sha256
next
end
However, the phase 1 negotiation is failing. The administrator executed the IKF real time debug while attempting the Ipsec connection. The output is shown in the exhibit.


What is causing the IPsec problem in the phase 1 ?

• A.The pre-shared key is wrong
• B.The phrase-1 mode must be changed to aggressive
• C.The incoming IPsec connection is matching the wrong VPN configuration
• D.NAT-T settings do not match

Examine the output from the BGP real time debug shown in the exhibit, then the answer the question below:

Which statements are true regarding the output in the exhibit? (Choose two.)

• A.The state of the remote BGP peer will go to Connect after it confirms the received prefixes.
• B.The state of the remote BGP peer is OpenConfirm.
• C.BGP peers have successfully interchanged Open and Keepalive messages.
• D.Local BGP peer received a prefix for a default route.

Examine the output of the 'get router info ospf interface' command shown in the exhibit; then answer the question below.

Which statements are true regarding the above output? (Choose two.)

• A.The port4 interface is connected to the OSPF backbone area.
• B.There are at least 5 OSPF routers connected to the port4 network.
• C.Two OSPF routers are down in the port4 network.
• D.The local FortiGate has been elected as the OSPF backup designated router.

A FortiGate device has the following LDAP configuration:

The administrator executed the 'dsquery' command in the Windows LDAp server 10.0.1.10, and got the following output:
>dsquery user -samid administrator
"CN=Administrator, CN=Users, DC=trainingAD, DC=training, DC=lab"
Based on the output, what FortiGate LDAP setting is configured incorrectly?

• A.dn.
• B.password.
• C.username.
• D.cnid.

Refer to the exhibit, which contains the output of a BGP debug command.

Which statement about the exhibit is true?

• A.Since the counters were last reset, the 10.200.3.1 peer has never been down.
• B.The local router BGP state is OpenConfirm with the 10.127.0.75 peer.
• C.The local router has not established a TCP session with 100.64.3.1.
• D.The local router has received a total of three BGP prefixes from all peers.