Free Fortinet NSE 7 – Enterprise Firewall 7.0 Exam NSE7_EFW-7.0 Exam Practice Test

Which two conditions must be met for a statistic route to be active in the routing table? (Choose two.)

• The link health monitor (if configured) is up.
• There is no other route, to the same destination, with a higher distance.
• The outgoing interface is up.
• The next-hop IP address is up.

Four FortiGate devices configured for OSPF connected to the same broadcast domain. The first unit is elected as the designated router The second unit is elected as the backup designated router Under normal operation, how many OSPF full adjacencies are formed to each of the other two units?

• 1
• 2
• 3
• 4

You have configured FortiManager as a local FDS to provide FortiGate AV and IPS updates, but FortiGate devices are not receiving updates to their AV signature databases, IPS engines, or IPS signature databases.Which two settings need to be verified for these features to function? (Choose two.)

• FortiGate needs to have the server list entry for FortiManager set to server-type update under config system central-management.
• FortiManager needs to be the license validation server for FortiGate devices trying to retrieve updated AV and IPS packages.
• Service access needs to be enabled on FortiManager under System Settings > Network.
• FortiGate needs to have include-default-servers disabled under config system central-management.

An administrator has enabled HA session synchronization in a HA cluster with two members. Which flag is added to a primary unit's session to indicate that it has been synchronized to the secondary unit?

• redir.
• dirty.
• synced
• nds.

A corporate network allows Internet Access to FSSO users only. The FSSO user student does not have Internet access after successfully logged into the Windows AD network. The output of the 'diagnose debug authd fsso list' command does not show student as an active FSSO user. Other FSSO users can access the Internet without problems. What should the administrator check? (Choose two.)

• The user student must not be listed in the CA's ignore user list.
• The user student must belong to one or more of the monitored user groups.
• The student workstation's IP subnet must be listed in the CA's trusted list.
• At least one of the student's user groups must be allowed by a FortiGate firewall policy.

Which statement is true regarding File description (FD) conserve mode?

• IPS inspection is affected when FortiGate enters FD conserve mode.
• A FortiGate enters FD conserve mode when the amount of available description is less than 5%.
• FD conserve mode affects all daemons running on the device.
• Restarting the WAD process is required to leave FD conserve mode.

Which two tasks are automated using the Install Wizard on FortiManager? (Choose two.)

• Preview pending configuration changes for managed devices.
• Add devices to FortiManager.
• Import policy packages from managed devices.
• Install configuration changes to managed devices.
• Import interface mappings from managed devices.

When using the SSL certificate inspection method for HTTPS traffic, how does FortiGate filter web requests when the browser client does not provide the server name indication (SNI) extension?

• FortiGate uses CN information from the Subject field in the server's certificate.
• FortiGate switches to the full SSL inspection method to decrypt the data.
• FortiGate blocks the request without any further inspection.
• FortiGate uses the requested URL from the user's web browser.

Which statement about memory conserve mode is true?

• A FortiGate exits conserve mode when the configured memory use threshold reaches yellow.
• A FortiGate starts dropping all the new and old sessions when the configured memory use threshold reaches extreme.
• A FortiGate starts dropping new sessions when the configured memory use threshold reaches red
• A FortiGate enters conserve mode when the configured memory use threshold reaches red

What configuration changes can reduce the memory utilization in a FortiGate? (Choose two.)

• Reduce the session time to live.
• Increase the TCP session timers.
• Increase the FortiGuard cache time to live.
• Reduce the maximum file size to inspect.