Free Fortinet NSE7 Exam Dumps Questions & Answers

An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage. However, after the changes, one network application started to have problems. During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before the arrival of the SYN/ACKs. When the SYN/ACK packets arrive to the FortiGate, the unit has already deleted the respective sessions. Which TCP session timer must be increased to fix this problem?

• A.TCP half close.
• B.TCP time wait.
• C.TCP half open.
• D.TCP session time to live.

Examine the output of the 'diagnose sys session list expectation' command shown in the exhibit; than answer the question below.

Which statement is true regarding the session in the exhibit?

• A.It is for management traffic terminating at the FortiGate.
• B.It was created by a session helper or ALG.
• C.It is for traffic originated from the FortiGate.
• D.It was created by the FortiGate kernel to allow push updates from FotiGuard.

View the exhibit, which contains the output of a debug command, and then answer the question below.

What statement is correct about this FortiGate?

• A.It is currently in system conserve mode because of high memory usage.
• B.It is currently in FD conserve mode.
• C.It is currently in kernel conserve mode because of high memory usage.
• D.It is currently in system conserve mode because of high CPU usage.

Examine the output from the BGP real time debug shown in the exhibit, then the answer the question below:

Which statements are true regarding the output in the exhibit? (Choose two.)

• A.The state of the remote BGP peer is OpenConfirm.
• B.The state of the remote BGP peer will go to Connect after it confirms the received prefixes.
• C.Local BGP peer received a prefix for a default route.
• D.BGP peers have successfully interchanged Open and Keepalive messages.

View the global IPS configuration, and then answer the question below.

Which of the following statements is true regarding this configuration?

• A.New packets will be passed through without inspection if the IPS socket buffer runs out of memory.
• B.IPS will use the faster matching algorithm which is only available for units with more than 4 GB memory.
• C.FortiGate will spawn IPS engine instances based on the system load.
• D.IPS will scan every byte in every session.