Fortinet NSE7_EFW-6.4 Exam

Status: RETIRED

Certification Provider: Fortinet

Exam Name: Fortinet NSE 7 - Enterprise Firewall 6.4

Number of questions in our database: 122

Exam Version: 18-08-2022

NSE7_EFW-6.4 Exam Official Topics:

Topic 1: Central management and analysis using FortiManager and FortiAnalyzer/ Autodiscovery VPN (ADVPN)
Topic 2: Dynamic routing: OSPF, Border Gateway Protocol (BGP)/ System and session troubleshooting
Topic 3: Implement the Fortinet Security Fabric/ Perform initial configuration
Topic 4: Traffic and session monitoring/ Routing and Layer 2 switching
Topic 5: Intrusion Prevention System (IPS)/ Content inspection/ FortiOS architecture

Free Fortinet NSE7_EFW-6.4 Exam Actual Questions

The questions for NSE7_EFW-6.4 were last updated On 18-08-2022

Question #1

Refer to the exhibit, which shows a session entry. Which statement about this session is true?

AIt is an ICMP session from 10.1.10.10 to 10.200.5. 1.

BIt is a TCP session in close_wait state, from 10. l. 10.10 to 10.200.1.1.

CIt is an ICMP session from 10.1.10.10 to 10.200.1.1.

DIt is a TCP session in the established state, from 10.1.10.10 to 10.200.5.1.

Reveal Solution

Correct Answer: A

Question #2

Refer to the exhibit, which contains a TCL script configuration on FortiManager.

An administrator has configured the TCL script on FortiManager, but the TCL script failed to apply any changes to the managed device after being run.

Why did the TCL script fail to make any changes to the managed device?

AThe TCL command run_cmd has not been created.

BThe TCL script must start with tinclude <>.

CIncomplete commands are ignored in TCL scripts.

DChanges to an interface configuration can be made only by a CLI script.

Reveal Solution

Correct Answer: A

Question #3

An administrator cannot connect to the GIU of a FortiGate unit with the IP address 10.0.1.254. The administrator runs the debug flow while attempting the connection using HTTP. The output of the debug flow is shown in the exhibit:

Based on the error displayed by the debug flow, which are valid reasons for this problem? (Choose two.)

AHTTP administrative access is disabled in the FortiGate interface with the IP address 10.0.1.254.

BRedirection of HTTP to HTTPS administrative access is disabled.

CHTTP administrative access is configured with a port number different than 80.

DThe packet is denied because of reverse path forwarding check.

Reveal Solution

Correct Answer: A, C

Question #4

Examine the following routing table and BGP configuration; then answer the question below.

TheBGP connection is up, but the local peer is NOT advertising the prefix 192.168.1.0/24. Which configuration change will make the local peer advertise this prefix?

AEnable the redistribution of connected routers into BGP.

BEnable the redistribution of static routers into BGP.

CDisable the setting network-import-check.

DEnable the setting ebgp-multipath.

Reveal Solution

Correct Answer: C

Question #5

Examine the following partial output from two system debug commands; then answer the question below.

Which of the following statements are true regarding the above outputs? (Choose two.)

AThe unit is running a 32-bit FortiOS

BThe unit is in kernel conserve mode

CThe Cached value is always the Active value plus the Inactive value

DKernel indirectly accesses the low memory (LowTotal) through memory paging

Reveal Solution

Correct Answer: A, C

Unlock all NSE7_EFW-6.4 Exam Questions with Advanced Practice Test Features:

Select Question Types you want
Set your Desired Pass Percentage
Allocate Time (Hours : Minutes)
Create Multiple Practice tests with Limited Questions
Customer Support

Get Full Access Now

Disscuss Fortinet NSE7_EFW-6.4 Topics, Questions or Ask Anything Related

Submit Cancel