Free Fortinet NSE7_FSN_AR-7.6 Exam Dumps Questions & Answers

Refer to the exhibit, which shows a session entry.

Which statement about this session is true?

• A.  It is an ICMP session from 10.1.10.1 to 10.200.5.1.
• B.  It is an ICMP session from 10.1.10.10 to 10.200.1.1.
• C.  Return traffic to the initiator is sent lo 10.200.1.254.
• D.  Return traffic to the initiator is sent to 10.1.0.1.

Exhibit.

Refer to the exhibit, which contains a screenshot of some phase 1 settings.
The VPN is not up. To diagnose the issue, the administrator enters the following CLI commands on an SSH session on FortiGate:

However, the IKE real-time debug does not show any output. Why?

• A.  The administrator must also run the command diagnose debug enable.
• B.  Replace diagnose debug application ike -1 with diagnose debug application ipsec -1.
• C.  The log-filter setting is incorrect. The VPN traffic does not match this filter.
• D.  The debug shows only error messages. If there is no output, then the phase 1 and phase 2 configurations match.

Refer to the exhibit.

Based on the exhibit, what is the first message with which Spoke 1 replies to the hub, instructing it to bring up the dynamic tunnel when a client generates traffic destined for Spoke 2? (Choose one answer.)

• A.  Shortcut forward
• B.  Shortcut query
• C.  Shortcut offer
• D.  Shortcut reply

Refer to the exhibit.

The partial output of a session table entry is shown.
Which two statements about the output shown in the exhibit are correct? (Choose two.)

• A.  The session has been offloaded.
• B.  The traffic matches Policy ID 1.
• C.  NP7 is handling offloading of this session.
• D.  The traffic is tagged for a VLAN interface.

What are three characteristics of the provisioning templates available on FortiManager? (Choose three.)

• A.  CLI templates are applied in order, from top to bottom.
• B.  Each template group can contain up to three IPsec tunnel templates.
• C.  A CLI template group can contain CLI templates of different types.
• D.  A template group can include a system template and an SD-WAN template.
• E.  A CLI template can be of type CLI script or Perl script.