Pass NSE7_EFW-7.0 Exam Guide

Fortinet NSE 7 - Enterprise Firewall 7.0 Questions and Answers

Question 17

View the exhibit, which contains a partial output of an IKE real-time debug, and then answer the question below.

Based on the debug output, which phase-1 setting is enabled in the configuration of this VPN?

auto-discovery-sender

auto-discovery-forwarder

auto-discovery-shortcut

auto-discovery-receiver

Question 18

Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.)

IPS failopen

mem failopen

AV failopen

UTM failopen

Question 19

View the exhibit, which contains the output of a real-time debug, Which statement about this output is true?

Which of the following statements is true regarding this output?

The requested URL belongs to category ID 255.

The server hostname Is training, fortinet.com.

FortiGate found the requested URL in its local cache.

This web request was inspected using the ftgd-allow web filler profile.

Question 20

How does FortiManager handle FortiGuard requests from FortiGate devices, when it is configured as a local FDS?

FortiManager can download and maintain local copies of FortiGuard databases.

FortiManager supports only FortiGuard push to managed devices.

FortiManager will respond to update requests only if they originate from a managed device.

FortiManager does not support rating requests.