Fortinet NSE7 Enterprise Firewall - FortiOS 5.4

QUESTION NO: 1
View the exhibit, which contains the output of a debug command, and then answer the question below.

Which of the following statements about the exhibit are true? (Choose two.)

A. The local FortiGate has been elected as the OSPF backup designated router. B. Port4 is connected to the OSPF backbone area. C. The local FortiGate's OSPF router ID is 0.0.0.4 D. In the network on port4, two OSPF routers are down.

Correct Answer: B,C

QUESTION NO: 2
Examine the output of the 'diagnose sys session list expectation' command shown in the exhibit; than answer the question below.

Which statement is true regarding the session in the exhibit?

A. It was created by the FortiGate kernel to allow push updates from FotiGuard. B. It was created by a session helper or ALG. C. It is for management traffic terminating at the FortiGate. D. It is for traffic originated from the FortiGate.

Correct Answer: A

QUESTION NO: 3
What configuration changes can reduce the memory utilization in a FortiGate? (Choose two.)

A. Increase the TCP session timers. B. Increase the FortiGuard cache time to live. C. Reduce the maximum file size to inspect. D. Reduce the session time to live.

Correct Answer: C,D

QUESTION NO: 4
A FortiGate device has the following LDAP configuration:

The administrator executed the 'dsquery' command in the Windows LDAp server 10.0.1.10, and got the following output:
>dsquery user -samid administrator
"CN=Administrator, CN=Users, DC=trainingAD, DC=training, DC=lab"
Based on the output, what FortiGate LDAP setting is configured incorrectly?

A. password. B. username. C. cnid. D. dn.

Correct Answer: C

QUESTION NO: 5
Examine the output of the 'get router info bgp summary' command shown in the exhibit; then answer the question below.

Which statement can explain why the state of the remote BGP peer 10.200.3.1 is Connect?

A. The TCP session for the BGP connection to 10.200.3.1 is down. B. The local peer has received the BGP prefixed from the remote peer. C. The local peer is receiving the BGP keepalives from the remote peer but it has not received the OpenConfirm yet. D. The local peer is receiving the BGP keepalives from the remote peer but it has not received any BGP prefix yet.

Correct Answer: A

QUESTION NO: 6
An LDAP user cannot authenticate against a FortiGate device. Examine the real time debug output shown in the exhibit when the user attempted the authentication; then answer the question below.

Based on the output in the exhibit, what can cause this authentication problem?

A. The FortiGate has been configured with the wrong password for the LDAP administrator. B. The FortiGate has been configured with the wrong authentication schema. C. User student is not found in the LDAP server. D. User student is using a wrong password.

Correct Answer: C

QUESTION NO: 7
Four FortiGate devices configured for OSPF connected to the same broadcast domain. The first unit is elected as the designated router The second unit is elected as the backup designated router Under normal operation, how many OSPF full adjacencies are formed to each of the other two units?

A. 1 B. 3 C. 2 D. 4

Correct Answer: C

QUESTION NO: 8
Examine the output from the 'diagnose debug authd fsso list' command; then answer the question below.
# diagnose debug authd fsso list FSSO logons-IP: 192.168.3.1 User: STUDENT Groups:
TRAININGAD/USERS Workstation: INTERNAL2. TRAINING. LAB The IP address 192.168.3.1 is NOT the one used by the workstation INTERNAL2. TRAINING. LAB.
What should the administrator check?

A. The reserve DNS lookup forthe IP address 192.168.3.1. B. The source IP address of the traffic arriving to the FortiGate from the workstation INTERNAL2.
TRAINING. LAB. C. The DNS name resolution for the workstation name INTERNAL2. TRAINING. LAB. D. The IP address recorded in the logon event for the user STUDENT.

Correct Answer: B

QUESTION NO: 9
View the exhibit, which contains the output of diagnose sys session list, and then answer the question below.

If the HA ID for the primary unit is zero (0), which statement is correct regarding the output?

A. This session is for HA heartbeat traffic. B. This session is synced with the slave unit. C. This session cannot be synced with the slave unit. D. The inspection of this session has been offloaded to the slave unit.

Correct Answer: B

Fortinet NSE7 Enterprise Firewall - FortiOS 5.4 - NSE7 Exam Questions