Free Fortinet NSE7_EFW-7.0 Exam Dumps Questions & Answers

Refer to exhibit, which contains the output of a BGP debug command.

Which statement explains why the state of the 10.200.3.1 peer is Connect?

• A.  The TCP session to 10.200.3.1 has not completed the three-way handshake.
• B.  The local router is receiving the BGP keepalives from the peer, but it has not received a BGP prefix yet.
• C.  The local router is receiving BGP keepalives from the remote peer, but the local peer has not received the OpenConfirm yet.
• D.  The local router has received the BGP prefixes from the remote peer.

An administrator is running the following sniffer in a FortiGate:
diagnose sniffer packet any "host 10.0.2.10" 2
What information is included in the output of the sniffer? (Choose two.)

• A.  IP headers.
• B.  Ethernet headers.
• C.  IP payload.
• D.  Port names.

View the exhibit, which contains a partial output of an IKE real-time debug, and then answer the question below.

Based on the debug output, which phase-1 setting is enabled in the configuration of this VPN?

• A.  auto-discovery-sender
• B.  auto-discovery-receiver
• C.  auto-discovery-shortcut
• D.  auto-discovery-forwarder

Examine the output from the BGP real time debug shown in the exhibit, then the answer the question below:

Which statements are true regarding the output in the exhibit? (Choose two.)

• A.  The state of the remote BGP peer is OpenConfirm.
• B.  The state of the remote BGP peer will go to Connect after it confirms the received prefixes.
• C.  Local BGP peer received a prefix for a default route.
• D.  BGP peers have successfully interchanged Open and Keepalive messages.

Refer to the exhibit, which contains the partial output of a diagnose command.

Based on the output, which two statements are correct? (Choose two.)

• A.  Quick mode selectors are disabled.
• B.  Anti-replay is enabled
• C.  DPD is disabled.
• D.  The remote gateway IP is 10.200.4.1.