Online Access Free NSE7_EFW Practice Test

A FortiGate's portl is connected to a private network. Its port2 is connected to the Internet. Explicit web proxy is enabled in port1 and only explicit web proxy users can access the Internet. Web cache is NOT enabled. An internal web proxy user is downloading a file from the Internet via HTTP. Which statements are true regarding the two entries in the FortiGate session table related with this traffic? (Choose two.)

• A.One session has the proxy flag on, the other one does not.
• B.Both session have the local flag on.
• C.The destination IP addresses of both sessions are IP addresses assigned to FortiGate's interfaces.
• D.One of the sessions has the IP address of port2 as the source IP address.

View the exhibit, which contains the output of get sys ha status, and then answer the question below.

Which statements are correct regarding the output? (Choose two.)

• A.port 7 is used the HA heartbeat on all devices in the cluster.
• B.Master is selected because it is the only device in the cluster.
• C.The HA management IP is 169.254.0.2.
• D.The slave configuration is not synchronized with the master.

A FortiGate is rebooting unexpectedly without any apparent reason. What troubleshooting tools could an administrator use to get more information about the problem? (Choose two.)

• A.Logs.
• B.Firewall monitor.
• C.Policy monitor.
• D.Crashlogs.

An administrator is running the following sniffer in a FortiGate:
diagnose sniffer packet any "host 10.0.2.10" 2
What information is included in the output of the sniffer? (Choose two.)

• A.IP payload.
• B.Ethernet headers.
• C.IP headers.
• D.Port names.

The CLI command set intelligent-mode <enable | disable> controls the IPS engine's adaptive scanning behavior. Which of the following statements describes IPS adaptive scanning?

• A.Choose a matching algorithm based on available memory and the type of inspection being performed.
• B.Downloads signatures on demand from FDS based on scanning requirements.
• C.Determines the optimal number of IPS engines required based on system load.
• D.Determines when it is secure enough to stop scanning session traffic.