← Back to exam page

NSE7_EFW-7.0 – Fortinet NSE 7 - Enterprise Firewall 7.0

Loading demo links...

Showing 7–9 of 10 questions

Question 7

View the exhibit, which contains the output of a debug command, and then answer the question below.

Which one of the following statements about this FortiGate is correct?

Select an option, then click Submit answer.

  • ○

    It is currently in system conserve mode because of high CPU usage.
  • ○

    It is currently in extreme conserve mode because of high memory usage.
  • ○

    It is currently in proxy conserve mode because of high memory usage.
  • ○

    It is currently in memory conserve mode because of high memory usage.
Question 8

Refer to the exhibit, which contains partial output from an IKE real-time debug.

The administrator does not have access to the remote gateway.

Based on the debug output, which configuration change can the administrator make to the local gateway to resolve the phase 1 negotiation error?

Select an option, then click Submit answer.

  • ○

    In the phase 1 network configuration, set the IKE version to 2.
  • ○

    In the phase 1 proposal configuration, add AES128-SHA128 to the list of encryption algorithms.
  • ○

    In the phase 1 proposal configuration, add AESCBC-SHA2 to the list of encryption algorithms.
  • ○

    In the phase 1 proposal configuration, add AES256-SHA256 to the list of encryption algorithms.
Question 9

Refer to the exhibit, which shows the output of a web filtering diagnose command.

Which configuration change would result in non-zero results in the cache statistics section?

Select an option, then click Submit answer.

  • ○

    set server-type rating under config system central-management
  • ○

    set webfilter-cache enable under config system fortiguard
  • ○

    set webfilter-force-off disable under config system fortiguard
  • ○

    set ngfw-mode policy-based under config system settings