Online Access Free NSE7_EFW Practice Test

View the exhibit, which contains the output of diagnose sys session stat, and then answer the question below.

Which statements are correct regarding the output shown? (Choose two.)

• A.All the sessions in the session table are TCP sessions.
• B.There are 166 TCP sessions waiting to complete the three-way handshake.
• C.There are 0 ephemeral sessions.
• D.No sessions have been deleted because of memory pages exhaustion.

How does FortiManager handle FortiGuard requests from FortiGate devices, when it is configured as a local FDS?

• A.FortiManager supports only FortiGuard push to managed devices.
• B.FortiManager can download and maintain local copies of FortiGuard databases.
• C.FortiManager will respond to update requests only if they originate from a managed device.
• D.FortiManager does not support rating requests.

A FortiGate has two default routes:

All Internet traffic is currently using port1. The exhibit shows partial information for one sample session of Internet traffic from an internal user:

What would happen with the traffic matching the above session if the priority on the first default route (IDd1) were changed from 5 to 20?

• A.Session would remain in the session table and its traffic would start using port2 as the outgoing interface.
• B.Session would remain in the session table and its traffic would keep using port1 as the outgoing interface.
• C.Session would remain in the session table and its traffic would be shared between port1 and port2.
• D.Session would be deleted, so the client would need to start a new session.

View the exhibit, which contains a partial output of an IKE real-time debug, and then answer the question below.

Based on the debug output, which phase-1 setting is enabled in the configuration of this VPN?

• A.auto-discovery-forwarder
• B.auto-discovery-sender
• C.auto-discovery-receiver
• D.auto-discovery-shortcut

Examine the output from the BGP real time debug shown in the exhibit, then the answer the question below:

Which statements are true regarding the output in the exhibit? (Choose two.)

• A.BGP peers have successfully interchanged Open and Keepalive messages.
• B.Local BGP peer received a prefix for a default route.
• C.The state of the remote BGP peer is OpenConfirm.
• D.The state of the remote BGP peer will go to Connect after it confirms the received prefixes.