← Back to exam page

NSE7_EFW-6.2 – Fortinet NSE 7 - Enterprise Firewall 6.2

Loading demo links...

Showing 7–9 of 10 questions

Question 7

View the exhibit, which contains a partial web filter profile configuration, and then answer the question below.

gã3Ë\\İËÏÈ Č03SUEİ3§

Ûl0C1itVåIİDURLs

Which action will FortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?

Select an option, then click Submit answer.

  • ○

    FortiGate will exempt the connection based on the Web Content Filter configuration.
  • ○

    FortiGate will block the connection based on the URL Filter configuration.
  • ○

    FortiGate will allow the connection based on the FortiGuard category based filter configuration.
  • ○

    FortiGate will block the connection as an invalid URL.
Question 8

Examine the output of the ‘get router info bgp summary’ command shown in the exhibit; then answer the question below.

Which statement can explain why the state of the remote BGP peer 10.200.3.1 is Connect?

Select an option, then click Submit answer.

  • ○

    The local peer is receiving the BGP keepalives from the remote peer but it has not received any BGP prefix yet.
  • ○

    The TCP session for the BGP connection to 10.200.3.1 is down.
  • ○

    The local peer has received the BGP prefixed from the remote peer.
  • ○

    The local peer is receiving the BGP keepalives from the remote peer but it has not received the OpenConfirm yet.
Question 9

A FortiGate is configured as an explicit web proxy. Clients using this web proxy are reposting DNS errors when accessing any website. The administrator executes the following debug commands and observes that the n-dns-timeout counter is increasing:

What should the administrator check to fix the problem?

Select an option, then click Submit answer.

  • ○

    The connectivity between the FortiGate unit and the DNS server.
  • ○

    The connectivity between the client workstations and the DNS server.
  • ○

    That DNS traffic from client workstations is allowed by the explicit web proxy policies.
  • ○

    That DNS service is enabled in the explicit web proxy interface.