Free Fortinet NSE7_EFW Exam Dumps Questions & Answers

The logs in a FSSO collector agent (CA) are showing the following error:
failed to connect to registry: PIKA1026 (192.168.12.232)
What can be the reason for this error?

• A.  The FortiGate cannot resolve the name of the workstation.
• B.  The CA cannot reach the FortiGate with the IP address 192.168.12.232.
• C.  The remote registry service is not running in the workstation 192.168.12.232.
• D.  The CA cannot resolve the name of the workstation.

View the exhibit, which contains the output of a diagnose command, and then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

• A.  FortiGate used 209.222.147.3 as the initial server to validate its contract.
• B.  Servers with the D flag are considered to be down.
• C.  Servers with a negative TZ value are experiencing a service outage.
• D.  FortiGate will probe 121.111.236.179 every fifteen minutes for a response.

Examine the following partial outputs from two routing debug commands; then answer the question below.
# get router info kernel
tab=254 vf=0 scope=0type=1 proto=11 prio=0 0.0.0.0/0.0.0.0/0- 0.0.0.0/0 pref=0.0.0.0 gwy=10.200.1.254 dev=2(port1) tab=254 vf=0 scope=0type=1 proto=11 prio=10 0.0.0.0/0.0.0.0/0- 0.0.0.0/0 pref=0.0.0.0 gwy=10.200.2.254 dev=3(port2) tab=254 vf=0 scope=253type=1 proto=2 prio=0 0.0.0.0/0.0.0.0/.- 10.0.1.0/24 pref=10.0.1.254 gwy=0.0.0.0 dev=4(port3)
# get router info routing-table all s*0.0.0.0/0 [10/0] via 10.200.1.254, portl [10/0] via 10.200.2.254, port2,
[10/0] dO.0.1.0/24 is directly connected, port3 dO.200.1.0/24 is directly connected, portl d0.200.2.0/24 is directly connected, port2 Which outbound interface or interfaces will be used by this FortiGate to route web traffic from internal users to the Internet?

• A.  port3.
• B.  port2.
• C.  Both portl and port2.
• D.  port!

An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator noticed that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link-failed-signal to fix the problem. Which statement is correct regarding this command?

• A.  Forces the former primary device to shut down all its non-heartbeat interfaces for one second while the failover occurs.
• B.  Disables all the non-heartbeat interfaces in all the HA members for two seconds after a failover.
• C.  Sends a link failed signal to all connected devices.
• D.  Sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.

Which of the following statements are correct regarding application layer test commands? (Choose two.)

• A.  They display real-time application debugs.
• B.  Some of them can be used to restart an application.
• C.  They are used to filter real-time debugs.
• D.  Some of them display statistics and configuration information about a feature or process.