Free Fortinet NSE7_EFW-6.2 Exam Dumps Questions & Answers

When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filter web requests when the client browser does not provide the server name indication (SNI) extension?

• A.  FortiGate uses the requested URL from the user's web browser.
• B.  FortiGate blocks the request without any further inspection.
• C.  FortiGate switches to the full SSL inspection method to decrypt the data.
• D.  FortiGate uses the CN information from the Subject field in the server certificate.

Examine the output of the 'diagnose debug rating' command shown in the exhibit; then answer the question below.

Which statement are true regarding the output in the exhibit? (Choose two.)

• A.  There are three FortiGuard servers that are not responding to the queries sent by the FortiGate.
• B.  A server's round trip delay (RTT) is not used to calculate its weight.
• C.  FortiGate will send the FortiGuard queries to the server with highest weight.
• D.  The TZ value represents the delta between each FortiGuard server's time zone and the FortiGate's time zone.

Which two conditions must be met for a statistic route to be active in the routing table? (Choose two.)

• A.  The next-hop IP address is up.
• B.  The outgoing interface is up.
• C.  The link health monitor (if configured) is up.
• D.  There is no other route, to the same destination, with a higher distance.

Examine the partial output from the IKE real time debug shown in the exhibit; then answer the question below.

Why didn't the tunnel come up?

• A.  One IPsec gateway is using main mode, while the other IPsec gateway is using aggressive mode.
• B.  The remote gateway's Phase-2 configuration does not match the local gateway's phase-2 configuration.
• C.  The remote gateway's Phase-1 configuration does not match the local gateway's phase-1 configuration.
• D.  IKE mode configuration is not enabled in the remote IPsec gateway.

View the exhibit, which contains the output of diagnose sys session list, and then answer the question below.

If the HA ID for the primary unit is zero (0), which statement is correct regarding the output?

• A.  This session is synced with the slave unit.
• B.  This session cannot be synced with the slave unit.
• C.  The inspection of this session has been offloaded to the slave unit.
• D.  This session is for HA heartbeat traffic.