Free Fortinet NSE7_EFW Exam Dumps Questions & Answers

View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.

Why didn't the tunnel come up?

• A.The remote gateway's phase 2 configuration does not match the local gateway's phase 2 configuration.
• B.The remote gateway's phase 1 configuration does not match the local gateway's phase 1 configuration.
• C.The remote gateway is using aggressive mode and the local gateway is configured to use man mode.
• D.The pre-shared keys do not match.

The logs in a FSSO collector agent (CA) are showing the following error:
failed to connect to registry: PIKA1026 (192.168.12.232)
What can be the reason for this error?

• A.The FortiGate cannot resolve the name of the workstation.
• B.The CA cannot reach the FortiGate with the IP address 192.168.12.232.
• C.The CA cannot resolve the name of the workstation.
• D.The remote registry service is not running in the workstation 192.168.12.232.

View the global IPS configuration, and then answer the question below.

Which of the following statements is true regarding this configuration?

• A.IPS will use the faster matching algorithm which is only available for units with more than 4 GB memory.
• B.IPS will scan every byte in every session.
• C.New packets will be passed through without inspection if the IPS socket buffer runs out of memory.
• D.FortiGate will spawn IPS engine instances based on the system load.

Examine the IPsec configuration shown in the exhibit; then answer the question below.

An administrator wants to monitor the VPN by enabling the IKE real time debug using these commands:
diagnose vpn ike log-filter src-addr4 10.0.10.1
diagnose debug application ike -1
diagnose debug enable
The VPN is currently up, there is no traffic crossing the tunnel and DPD packets are being interchanged between both IPsec gateways. However, the IKE real time debug does NOT show any output. Why isn't there any output?

• A.The IKE real time debug shows error messages only. If it does not provide any output, it indicates that the tunnel is operating normally.
• B.The IKE real time shows the phases 1 and 2 negotiations only. It does not show any more output once the tunnel is up.
• C.The log-filter setting is set incorrectly. The VPN's traffic does not match this filter.
• D.The IKE real time debug shows the phase 1 negotiation only. For information after that, the administrator must use the IPsec real time debug instead: diagnose debug application ipsec -1.

Examine the output of the 'get router info ospf interface' command shown in the exhibit; then answer the question below.

Which statements are true regarding the above output? (Choose two.)

• A.Two OSPF routers are down in the port4 network.
• B.The local FortiGate has been elected as the OSPF backup designated router.
• C.The port4 interface is connected to the OSPF backbone area.
• D.There are at least 5 OSPF routers connected to the port4 network.