Note! Following NSE7_EFW-6.4 Exam is Retired now. Please select the alternative replacement for your Exam Certification. The new exam code is NSE7_EFW-7.0

NSE7_EFW-6.4 Exam Dumps - Fortinet NSE 7 - Enterprise Firewall 7.0

Go to page:

Question # 4

Refer to the exhibit, which shows a partial routing table.

Assuming all the appropriate firewall policies are configured, which two pings will FortiGate route? (Choose two.)

Source IP address: 10.1.0.10. Destination IP address: 10.64.1.52

Source IPaddress: 10.72.3.52. Destination IP address: 10.1.0.254

Source IPaddress: 10.10.4.24, Destination IPaddress: 10.72.3.20

Source IPaddress: 10.73.9.10, Destination IPaddress: 10.72.3.15

Full Access

Question # 5

View the exhibit, which contains a partial output of an IKE real-time debug, and then answer the question below.

Based on the debug output, which phase-1 setting is enabled in the configuration of this VPN?

auto-discovery-sender

auto-discovery-forwarder

auto-discovery-shortcut

auto-discovery-receiver

Full Access

Question # 6

When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filter web requests when the client browser does not provide the server name indication (SNI) extension?

FortiGate uses the requested URL from the userâ€™s web browser.

FortiGate uses the CN information from the Subject field in the server certificate.

FortiGate blocks the request without any further inspection.

FortiGate switches to the full SSL inspection method to decrypt the data.

Full Access

Question # 7

Which statement about memory conserve mode is true?

A FortiGate exits conserve mode when the configured memory use threshold reaches yellow.

A FortiGate starts dropping all the new and old sessions when the configured memory use threshold reaches extreme.

A FortiGate starts dropping new sessions when the configured memory use threshold reaches red

A FortiGate enters conserve mode when the configured memory use threshold reaches red

Full Access