Online Access Free NSE7_EFW-7.0 Practice Test

Refer to the exhibit, which shows the output of a web filtering diagnose command.

Which configuration change would result in non-zero results in the cache statistics section?

• A.set server-type rating under config system central-management
• B.set webfilter-force-off disable under config system fortiguard
• C.set ngfw-mode policy-based under config system settings
• D.set webfilter-cache enable under config system fortiguard

Which two conditions must be met for a statistic route to be active in the routing table? (Choose two.)

• A.There is no other route, to the same destination, with a higher distance.
• B.The next-hop IP address is up.
• C.The outgoing interface is up.
• D.The link health monitor (if configured) is up.

Refer to the exhibit, which shows the output of get system ha status. NGFW-1 and NGFW-2 have been up for a week.

Which two statements about the output are true? (Choose two.)

• A.If port7 becomes disconnected on the secondary, both FortiGate devices will elect itself the primary.
• B.If a configuration change is made to the primary FortiGate at this time, the secondary will initiate a synchronization reset.
• C.If no action is taken, the primary FortiGate will leave the cluster due to the current sync status.
• D.If FGVM...649 is rebooted, FGVM...650 will become the primary and retain that role, even after FGVM...649 rejoins the cluster.

View the exhibit, which contains the output of diagnose sys session stat, and then answer the question below.

Which statements are correct regarding the output shown? (Choose two.)

• A.There are 166 TCP sessions waiting to complete the three-way handshake.
• B.No sessions have been deleted because of memory pages exhaustion.
• C.All the sessions in the session table are TCP sessions.
• D.There are 0 ephemeral sessions.

The CLI command set intelligent-mode <enable | disable> controls the IPS engine's adaptive scanning behavior. Which of the following statements describes IPS adaptive scanning?

• A.Determines when it is secure enough to stop scanning session traffic.
• B.Downloads signatures on demand from FDS based on scanning requirements.
• C.Choose a matching algorithm based on available memory and the type of inspection being performed.
• D.Determines the optimal number of IPS engines required based on system load.