Free NSE7_EFW-6.4 Exam Dumps

Question 16

Examine the output of the ‘diagnose ips anomaly list’ command shown in the exhibit; then answer the question below.
NSE7_EFW-6.4 dumps exhibit
Which IP addresses are included in the output of this command?

A. Those whose traffic matches a DoS policy.
B. Those whose traffic matches an IPS sensor.
C. Those whose traffic exceeded a threshold of a matching DoS policy.
D. Those whose traffic was detected as an anomaly by an IPS sensor.

Correct Answer:A

Question 17

Refer to the exhibit, which contains the output of diagnose sys session list.
NSE7_EFW-6.4 dumps exhibit
If the HA ID for the primary unit is zero (0), which statement about the output is true?

A. This session cannot be synced with the slave unit.
B. The inspection of this session has been offloaded to the slave unit.
C. The master unit is processing this traffic.
D. This session is for HA heartbeat traffic.

Correct Answer:C

Question 18

Refer to the exhibit, which contains the output of a BGP debug command.
NSE7_EFW-6.4 dumps exhibit
Which statement about the exhibit is true?

A. The local router has received a total of three BGP prefixes from all peers.
B. The local router has not established a TCP session with 100.64.3.1.
C. Since the counters were last reset, the 10.200.3.1 peer has never been down.
D. The local router BGP state is OpenConfirm with the 10.127.0.75 peer.

Correct Answer:B

Question 19

A FortiGate device has the following LDAP configuration:
NSE7_EFW-6.4 dumps exhibit
The administrator executed the ‘dsquery’ command in the Windows LDAp server 10.0.1.10, and got the following output:
>dsquery user –samid administrator
“CN=Administrator, CN=Users, DC=trainingAD, DC=training, DC=lab” Based on the output, what FortiGate LDAP setting is configured incorrectly?

A. cnid.
B. username.
C. password.
D. dn.

Correct Answer:B
https://kb.fortinet.com/kb/viewContent.do?externalId=FD37516

Question 20

View the exhibit, which contains a screenshot of some phase-1 settings, and then answer the question below.
NSE7_EFW-6.4 dumps exhibit
The VPN is up, and DPD packets are being exchanged between both IPsec gateways; however, traffic cannot pass through the tunnel. To diagnose, the administrator enters these CLI commands:

However, the IKE real time debug does not show any output. Why?

A. The debug output shows phases 1 and 2 negotiations onl
B. Once the tunnel is up, it does not show any more output.
C. The log-filter setting was set incorrectl
D. The VPN’s traffic does not match this filter.
E. The debug shows only error message
F. If there is no output, then the tunnel is operating normally.
G. The debug output shows phase 1 negotiation onl
H. After that, the administrator must enable the following real time debug: diagnose debug application ipsec -1.

Correct Answer:B