Fortinet NSE 7 - Enterprise Firewall 6.0 - NSE7_EFW-6.0 Free Exam Questions

A. It inspects incoming traffic to protect services in the corporate DMZ.

B. It is an all-in-one security appliance that is placed at remote sites to extend the enterprise network.

C. It is the first line of defense at the network perimeter.

D. It splits the network into multiple security segments to minimize the impact of breaches.

A. FortiManager can download and maintain local copies of FortiGuard databases.

B. FortiManager will respond to update requests only if they originate from a managed device.

C. FortiManager does not support rating requests.

D. FortiManager supports only FortiGuard push to managed devices.

A. 1

B. 3

C. 2

D. 4

A. Import policy packages from managed devices.

B. Preview pending configuration changes for managed devices.

C. Install configuration changes to managed devices.

D. Add devices to FortiManager.

E. Import interface mappings from managed devices.

A. Traffic has been identified as from an application that is not allowed.

B. Traffic has been blocked by the antivirus inspection.

C. The session must be removed from the former primary unit after an HA failover.

D. The next packet must be re-evaluated against the firewall policies.

A. IPS engine memory consumption has exceeded the model-specific predefined value.

B. IPS daemon experienced a crash.

C. There are communication problems between the IPS engine and the management database.

D. All IPS-related features have been disabled in FortiGate's configuration.

A. A process crash.

B. Configuration changes.

C. Changes in the status of any of the FortiGuard licenses.

D. System entering to and leaving from the proxy conserve mode.

A. Change phase 1 encryption to AESCBC and authentication to SHA128.

B. Change phase 1 encryption to 3DES and authentication to SHA256.

C. Change phase 1 encryption to AES128 and authentication to SHA512.

D. Change phase 1 encryption to 3DES and authentication to CBC.

A. The inspection of this session has been offloaded to the slave unit.

B. This session is for HA heartbeat traffic.

C. This session cannot be synced with the slave unit.

D. This session is synced with the slave unit.

A. A UDP session with packets sent and received.

B. A UDP session with only one packet received.

C. A TCP session waiting to complete the three-way handshake.

D. A TCP session waiting for FIN ACK.