Question 6 of 35
Refer to the exhibit, which shows the output of a BGP debug command.
Exam NSE7_EFW-6.4: Question 6 - Image 1
Which statement about the exhibit is true?
Answer

Suggested Answer

The suggested answer is A.

The local router has not established a TCP session with 100.64.3.1, which is indicated by the state 'Active'. 'Active' means the router is trying to establish a TCP connection on port 179 but has not succeeded yet. Other states like 'Idle', 'Connect', 'OpenSent', 'OpenConfirm', and 'Established' would indicate different phases of the BGP session establishment.

Community Votes1 vote
ASuggested
100%
Question 7 of 35
Refer to the exhibit, which contains a TCL script configuration on FortiManager.
Exam NSE7_EFW-6.4: Question 7 - Image 1
An administrator has configured the TCL script on FortiManager, but the TCL script failed to apply any changes to the managed device after being run.
Why did the TCL script fail to make any changes to the managed device?
Answer

Suggested Answer

The suggested answer is B.

The TCL script provided attempts to use the command 'run_cmd,' but this command has not been created or defined anywhere in the script. For the script to work, any command used must be properly defined or imported. Without the definition or creation of 'run_cmd,' the script will fail to execute the commands required to make changes to the managed device.

Community Votes

No votes yet

Join the discussion to cast yours

Question 8 of 35
Refer to the exhibit, which contains the debug output of diagnose dvm device list.
Exam NSE7_EFW-6.4: Question 8 - Image 1
Which two statements about the output shown in the exhibit are correct? (Choose two.)
Answer

Suggested Answer

The suggested answer is B, D.

Reference:
https://docs.fortinet.com/document/fortimanager/7.0.0/upgrade-guide/959309/cli-example-of-diagnose-dvm-device-list
Exam NSE7_EFW-6.4: Question 8 - Image 2 BC
Community Votes

No votes yet

Join the discussion to cast yours

Question 9 of 35
Refer to the exhibit, which shows a FortiGate configuration.
Exam NSE7_EFW-6.4: Question 9 - Image 1
An administrator is troubleshooting a web filter issue on FortiGate. The administrator has configured a web filter profile and applied it to a policy; however, the web filter is not inspecting any traffic that is passing through the policy.
What must the administrator change to fix the issue?
Answer

Suggested Answer

The suggested answer is B.

The administrator must disable 'webfilter-force-off' to allow the FortiGuard web filtering service to operate. When 'webfilter-force-off' is enabled, it turns off the web filtering service, preventing it from inspecting any traffic.

Community Votes11 votes
BSuggested
100%
Question 10 of 35
When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filter web requests when the client browser does not provide the server name indication (SNI) extension?
Answer

Suggested Answer

The suggested answer is A.

Reference:
https://checkthefirewall.com/blogs/fortinet/ssl-inspection
Exam NSE7_EFW-6.4: Question 10 - Image 1 A
Community Votes

No votes yet

Join the discussion to cast yours