Free Fortinet NSE7_EFW Exam Dumps Questions & Answers

View the exhibit, which contains the output of diagnose sys session list, and then answer the question below.

If the HA ID for the primary unit is zero (0), which statement is correct regarding the output?

• A.  This session is for HA heartbeat traffic.
• B.  This session is synced with the slave unit.
• C.  The inspection of this session has been offloaded to the slave unit.
• D.  This session cannot be synced with the slave unit.

In which of the following states is a given session categorized as ephemeral? (Choose two.)

• A.  A TCP session waiting for FIN ACK.
• B.  A UDP session with packets sent and received.
• C.  A UDP session with only one packet received.
• D.  A TCP session waiting to complete the three-way handshake.

An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage. However, after the changes, one network application started to have problems. During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before the arrival of the SYN/ACKs. When the SYN/ACK packets arrive to the FortiGate, the unit has already deleted the respective sessions. Which TCP session timer must be increased to fix this problem?

• A.  TCP half open.
• B.  TCP half close.
• C.  TCP session time to live.
• D.  TCP time wait.

View the IPS exit log, and then answer the question below.
# diagnose test application ipsmonitor 3
ipsengine exit log"
pid = 93 (cfg), duration = 5605322 (s) at Wed Apr 19 09:57:26 2017
code = 11, reason: manual
What is the status of IPS on this FortiGate?

• A.  All IPS-related features have been disabled in FortiGate's configuration.
• B.  There are communication problems between the IPS engine and the management database.
• C.  IPS engine memory consumption has exceeded the model-specific predefined value.
• D.  IPS daemon experienced a crash.

View the exhibit, which contains the output of diagnose sys session stat, and then answer the question below.

Which statements are correct regarding the output shown? (Choose two.)

• A.  There are 0 ephemeral sessions.
• B.  All the sessions in the session table are TCP sessions.
• C.  There are 166 TCP sessions waiting to complete the three-way handshake.
• D.  No sessions have been deleted because of memory pages exhaustion.