New Year Special 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: Board70

NSE7_EFW-7.0 Premium Exam Questions

Page: 4 / 5
Question 16

Refer to the exhibit, which contains a TCL script configuration on FortiManager.

An administrator has configured the TCL script on FortiManager, but failed to apply any changes to the managed device after being executed.

Why did the TCL script fail to make any changes to the managed device?

Options:

A.

Changes in an interface configuration can only be done by CLI script.

B.

The TCL script must start with #include <>.

C.

Incomplete commands are ignored in TCL scripts.

D.

The TCL command run_cmd has not been created.

Question 17

An administrator has configured the following CLI script on FortiManager, which failed to apply any changes to the managed device after being executed.

Why didn’t the script make any changes to the managed device?

Options:

A.

Commands that start with the # sign are not executed.

B.

CLI scripts will add objects only if they are referenced by policies.

C.

Incomplete commands are ignored in CLI scripts.

D.

Static routes can only be added using TCL scripts.

Question 18

An administrator cannot connect to the GIU of a FortiGate unit with the IP address 10.0.1.254. The administrator runs the debug flow while attempting the connection using HTTP. The output of the debug flow is shown in the exhibit:

Based on the error displayed by the debug flow, which are valid reasons for this problem? (Choose two.)

Options:

A.

HTTP administrative access is disabled in the FortiGate interface with the IP address 10.0.1.254.

B.

Redirection of HTTP to HTTPS administrative access is disabled.

C.

HTTP administrative access is configured with a port number different than 80.

D.

The packet is denied because of reverse path forwarding check.

Question 19

Refer to the exhibit, which contains a screenshot of some phase 1 settings.

The VPN is not up. To diagnose the issue, the administrator enters the following CLI commands to an SSH session on FortiGate: diagnose vpn ike log-filter dst-addr4 10.0.10.1 diagnose debug application ike -1

However, the IKE real-time debug does not show any output. Why?

Options:

A.

The administrator must also run the command diagnose debug enable.

B.

The administrator must enable the following real-time debug: diagnose debug application ipsec -1.

C.

The log-filter setting is incorrect. The VPN traffic does not match this filter.

D.

The debug shows only error messages. If there is no output, then the phase 1 and phase 2 configurations match.

Page: 4 / 5
Exam Code: NSE7_EFW-7.0
Exam Name: Fortinet NSE 7 - Enterprise Firewall 7.0
Last Update: Dec 22, 2024
Questions: 163
NSE7_EFW-7.0 pdf

NSE7_EFW-7.0 PDF

$25.5  $84.99
NSE7_EFW-7.0 Engine

NSE7_EFW-7.0 Testing Engine

$28.5  $94.99
NSE7_EFW-7.0 PDF + Engine

NSE7_EFW-7.0 PDF + Testing Engine

$40.5  $134.99