It is more faster and easier to pass the Fortinet NSE7 exam by using Downloadable Fortinet Fortinet Troubleshooting Professional questuins and answers. Immediate access to the Renew NSE7 Exam and find the same core area NSE7 questions with professionally verified answers, then PASS your exam with a high score now.
2021 Sep NSE7 test preparation
Q11. Examine the output from the 'diagnose debug authd fsso list' command; then answer the question below.
# diagnose debug authd fsso list—FSSO logons-IP: 192.168.3.1 User: STUDENT Groups:TRAININGAD/USERS Workstation: INTERNAL2. TRAINING. LAB The IP address 192.168.3.1 is NOT the one used by the workstation INTERNAL2. TRAINING. LAB.
What should the administrator check?
A. The IP address recorded in the logon event for the user STUDENT.
B. The DNS name resolution for the workstation name INTERNAL2. TRAINING. LAB.
C. The source IP address of the traffic arriving to the FortiGate from the workstation INTERNAL2. TRAINING. LAB.
D. The reserve DNS lookup forthe IP address 192.168.3.1.
Answer: C
Q12. A FortiGate device has the following LDAP configuration:
Based on the output, what FortiGate LDAP setting is configured incorrectly?
A. cnid.
B. username.
C. password.
D. dn.
Answer: B
Q13. An LDAP user cannot authenticate against a FortiGate device. Examine the real time debug output shown in the exhibit when the user attempted the authentication; then answer thequestion below.
Based on the output in the exhibit, what can cause this authentication problem?
A. User student is not found in the LDAP server.
B. User student is using a wrong password.
C. The FortiGate has been configured with the wrongpassword for the LDAP administrator.
D. The FortiGate has been configured with the wrong authentication schema.
Answer: A
Q14. Examine the following partial outputs from two routing debug commands; then answer the question below.
# get router info routing-table database
s 0.0.0.0/0 [20/0] via 10.200.2.254, port2, [10/0] s *> 0.0.0.0/0 [10/0] via 10.200.1.254, port1
# get router info routing-table all
s* 0.0.0.0/0 [10/0] via 10.200.1.254, port1
Why the default route using port2 is not displayed in the output of the second command?
A. it has a lower priority than the default route using port1.
B. it has a higher priority than the default route using portl.
C. it has a higher distance than the default route using portl.
D. it is disabled in the FortiGate configuration.
Answer: A
Q15. Examine the output from the 'diagnose debug authd fsso list' command; then answer the question below.
# diagnose debug authd fsso list—FSSO logons-IP: 192.168.3.1 User: STUDENT Groups:TRAININGAD/USERS Workstation: INTERNAL2. TRAINING. LAB The IP address 192.168.3.1 is NOT the one used by the workstation INTERNAL2. TRAINING. LAB.
What should the administrator check?
A. The IP address recorded in the logon event for the user STUDENT.
B. The DNS name resolution for the workstation name INTERNAL2. TRAINING. LAB.
C. The source IP address of the traffic arriving to the FortiGate from the workstation INTERNAL2. TRAINING. LAB.
D. The reserve DNS lookup forthe IP address 192.168.3.1.
Answer: C
Down to date NSE7 free question:
Q16. An administrator added the following Ipsec VPN to a FortiGate configuration:
configvpn ipsec phasel -interface
edit "RemoteSite"
set type dynamic
set interface "portl"
set mode main
set psksecret ENC LCVkCiK2E2PhVUzZe
next
end
config vpn ipsec phase2-interface
edit "RemoteSite"
set phasel name "RemoteSite"
set proposal 3des-sha256
next
end
However, the phase 1 negotiation is failing. The administrator executed the IKF real time debug while attempting the Ipsec connection. The output is shown in the exhibit.
What is causing the IPsec problem in the phase 1 ?
A. The incoming IPsec connection is matching the wrong VPN configuration
B. The phrase-1 mode must be changed to aggressive
C. The pre-shared key is wrong
D. NAT-T settings do not match
Answer: C
Q17. Examine the following partial output from two system debug commands; then answer the question below.
Which of the following statements are true regarding the aboveoutputs? (Choose two.)
A. The unit is running a 32-bit FortiOS
B. The unit is in kernel conserve mode
C. The Cached value is always the Active value plus the Inactive value
D. Kernel indirectly accesses the low memory (LowTotal) through memory paging
Answer: A,C
Q18. Examine the output of the 'get router info ospf interface' command shown in the exhibit; then answer the question below.
Which statements are true regarding the above output? (Choose two.)
A. Theport4 interface is connected to the OSPF backbone area.
B. The local FortiGate has been elected as the OSPF backup designated router
C. There are at least 5 OSPF routers connected to the port4 network.
D. Two OSPF routers are down in the port4 network.
Answer: A,D
Q19. An administrator added the following Ipsec VPN to a FortiGate configuration:
configvpn ipsec phasel -interface
edit "RemoteSite"
set type dynamic
set interface "portl"
set mode main
set psksecret ENC LCVkCiK2E2PhVUzZe
next
end
config vpn ipsec phase2-interface
edit "RemoteSite"
set phasel name "RemoteSite"
set proposal 3des-sha256
next
end
However, the phase 1 negotiation is failing. The administrator executed the IKF real time debug while attempting the Ipsec connection. The output is shown in the exhibit.
What is causing the IPsec problem in the phase 1 ?
A. The incoming IPsec connection is matching the wrong VPN configuration
B. The phrase-1 mode must be changed to aggressive
C. The pre-shared key is wrong
D. NAT-T settings do not match
Answer: C
Q20. What configuration changes can reduce the memory utilization in a FortiGate? (Choose two.)
A. Reduce the session time to live.
B. Increase the TCP session timers.
C. Increase the FortiGuard cache time to live.
D. Reduce the maximum file size to inspect.
Answer: A,D