NSE7_EFW-6.0 Free Practice Test

View the exhibit, which contains a partial routing table, and then answer the question below.
<>

1. A. Source IP address 10.1.0.24, Destination IP address 10.72.3.20.
2. B. Source IP address 10.72.3.27, Destination IP address 10.1.0.52.
3. C. Source IP address 10.72.3.52, Destination IP address 10.1.0.254.
4. D. Source IP address 10.73.9.10, Destination IP address 10.72.3.15.

Correct Answer: BC

View the following FortiGate configuration.
< ><>>< ><>

1. A. The session would remain in the session table, and its traffic would still egress from port1.
2. B. The session would remain in the session table, but its traffic would now egress from both port1 and port2.
3. C. The session would remain in the session table, and its traffic would start to egress from port2.
4. D. The session would be deleted, so the client would need to start a new session.

Correct Answer: A
http://kb.fortinet.com/kb/documentLink.do?externalID=FD40943

Which the following events can trigger the election of a new primary unit in a HA cluster? (Choose two.)

1. A. Primary unit stops sending HA heartbeat keepalives.
2. B. The FortiGuard license for the primary unit is updated.
3. C. One of the monitored interfaces in the primary unit is disconnected.
4. D. A secondary unit is removed from the HA cluster.

Correct Answer: AB

Which of the following statements are true regarding the SIP session helper and the SIP application layer gateway (ALG)? (Choose three.)

1. A. SIP session helper runs in the kernel; SIP ALG runs as a user space process.
2. B. SIP ALG supports SIP HA failover; SIP helper does not.
3. C. SIP ALG supports SIP over IPv6; SIP helper does not.
4. D. SIP ALG can create expected sessions for media traffic; SIP helper does not.
5. E. SIP helper supports SIP over TCP and UDP; SIP ALG supports only SIP over UDP.

Correct Answer: BCD

View the exhibit, which contains the output of a web diagnose command, and then answer the question below.
<>

1. A. The administrator has reallocated the cache memory to a separate process.
2. B. There are no users making web requests.
3. C. The FortiGuard web filter cache is disabled in the FortiGate’s configuration.
4. D. FortiGate is using a flow-based web filter and the cache applies only to proxy-based inspection.

Correct Answer: C