NSE7 Enterprise Firewall Practice Exam

These questions are part of the practice quiz. Start practicing

• What does the command 'get router info routing-table database' provide?
• What is the TCP state associated with closing a connection waiting for an acknowledgment?
• Which command is used to check real-time debug output on FortiGate?
• What is the TCP protocol state value for FIN_WAIT?
• Why is the default route using port2 not visible in the output of the second command?
• What is the primary command to get an overview of the HA status?
• What type of information do Type 4 LSA advertisements primarily provide?
• What do Type 4 LSA AS Summary Link Advertisements describe?
• Which command displays all options available for the web filtering test command?
• What command provides an overview of BGP's status?
• Which session flag indicates that the traffic will be checked by IPS anomaly detection?
• Which command would you use to display the route cache?
• Which command summarizes the FortiGuard configuration?
• Which command displays function names during debug flow?
• What is indicated by the presence of Reverse Path Forwarding (RPF)?
• Which three steps are executed to get antivirus and IPS updates using the pull method?
• What may cause a timing issue in adding a static route?
• What debug flow blocking message indicates a packet was dropped due to exceeding traffic shaping policy?
• What does the T flag signify in the output from the diagnose debug rating command?
• Which of the following proto_state values represents the SYN and SYN/ACK TCP state?
• What is the proto_state value for the SYN_SENT TCP state?
• What must be true for a static route to be included in the route table on FortiGate devices?
• What command provides information about the current health and status of a HA pair?
• Which troubleshooting step should be taken to resolve antivirus and IPS update issues on FortiGate?
• Which command displays the current statistics on a HA pair?
• What is the correct proto_state value for the CLOSE_WAIT state?
• What do Type 4 LSA advertisements provide regarding routes redistributed to OSPF?
• Which proto_state corresponds to the LISTEN TCP state?
• Which process is associated with SSL VPN functionality?
• What does Type 1 LSA Router Link Advertisements describe?
• What command would you use to check the memory allocated to kernel slabs?
• At what default memory percentage does FortiGate enter conserve mode?
• Which command shows the memory usage of each process currently running?
• Which command allows you to enter into the session-helper sub menu?
• What must be true for FortiGate to add a static route to the routing table?
• What is the function of the process 'iked'?
• Which two statements about a BGP peer are true?
• What is referred to as "loose mode" in FortiGate terminology?
• What happens if the SNI field is not present during SSL inspection?
• Which command is used to enable timestamp in real-time debug?
• Which two statements about a TCP session in SYN_SENT state are correct?
• What is contained in Type 3 LSA Summary Link Advertisements?
• Which command can assist in verifying the proper configuration of FortiGuard services?
• What is the function of the command set av-failopen while using proxy-based inspection?
• Which flag in the diagnose debug rating command output indicates a failed server response?
• What command is used to fetch the IPsec statistics for a tunnel?
• What does FIB stand for in the context of network routing?
• Which command is used to restart a BGP session between two peers?
• What session flag signifies that the traffic will be checked by an IPS signature?
• What is the final criterion for route selection in FortiGate?
• When troubleshooting FortiGuard connectivity issues, which action is valid?
• Which command displays information on each OSPF interface?
• Which command set is used to force a former primary HA device to shut down all non-heartbeat interfaces during a failover?
• How does FortiGate determine the site rating when processing SNI?
• Which session flag indicates that a packet cannot be offloaded to the NPU?
• What is the definition of an OSPF area border router?
• Which command is used to set the link-failed-signal in High Availability?
• What protocol and port does ESP traffic primarily use?
• Which protocol is characterized by having no state, as indicated by its protocol state?
• Which command would you use to check the status of network connections and performance?
• What command lists the content of the FortiGuard web filtering cache?
• What does 'npu' signify in the context of session flags?
• What is the purpose of running 'diagnose test application ipsmonitor' overall?
• Which process name handles IPsec connections?
• The 'hatalk' process is crucial for which function?
• True or False: FortiManager allows for automation of device provisioning using JSON APIs.
• What command provides detailed information about the OSPF process?
• What command can be used to display the top usage processes with available options?
• What two events can trigger an HA failover in FortiGate?
• Which command provides a quick view of traffic on the device, including blocked attacks?
• Which command provides information on the current status of BGP neighbors?
• What is the primary function of the httpsd process?
• Identify the command that allows debugging for common applications in real-time.
• When does FortiGate look up routing for new sessions?
• What is the second criterion in FortiGate's route selection process?
• What does the command set av-failopen-session control in FortiGate?
• Which command will list current versions of FortiGuard databases installed on the device?
• What is indicated by the command 'diagnose hardware deviceinfo nic <port_name>'?
• What command is used to list error counters related to web filtering?
• Which term describes LSA types that are only advertised by Area Border Routers (ABRs)?
• Which routing method is supported for static, BGP, and OSPF in FortiGate?
• Which three tasks are part of the manual registration process for adding a FortiGate device to FortiManager?
• Which command displays the processes with the highest resource usage?
• Which statement is true regarding FortiGate firmware upgrades?
• Which TCP state is represented by proto_state=08?
• What ports does IKE traffic primarily use?
• What command lists the LSAs originated on the local FortiGate?
• What does the command "diagnose debug flow show function-name enable" accomplish?
• What occurs if the heartbeat interface fails in an HA setup?
• In FortiGate, which command is best used to check the status of an IPsec VPN tunnel?
• Which value indicates UDP traffic that flows one way only?
• Which debug flow message indicates a packet may be incorrectly addressed to a management IP?
• What command displays FQDN and IP addresses of FortiGuard antivirus and IPS update servers?
• When FortiGate performs SSL certificate inspection, what does it use if the SNI field is present?
• What is the proto_state number for the TCP CLOSE state?
• What is the process name used for FortiGuard updates?
• Which command would you use to enable OSPF real-time debugging?
• Which state corresponds with proto_state=07?
• Which command can be used to dump the FortiGuard web filtering cache?
• Which of the following must match for forming OSPF adjacency?
• True or False: The proto_state for ICMP is always 00.
• What message is displayed when a packet is dropped due to a reverse path forwarding check failure?
• What command is used to display routes advertised by a neighbor?
• What does the I flag indicate in the output from the diagnose debug rating command?
• What command would you use to list OSPF adjacency information?
• What command retrieves detailed information about each BGP neighbor?
• True or False: Application layer test commands display information in real time.
• Which session flag indicates that it is to/from the local stack?
• True or False: With application layer test commands, you can restart a process or execute a change in its operation.
• During SSL inspection, if the CN field is used, what is being interpreted?
• Which two statements correctly describe characteristics of the Fortinet Security Fabric?
• In the context of ADVPN, what is the purpose of a route reflector?
• What process name is designated for Apple configuration changes?
• What command lists options for testing the IPS monitor?
• At what threshold does FortiGate begin to drop new sessions?
• Which command checks the time difference in a HA pair?
• What session flag indicates that a packet is being bridged in TP mode?
• Which of the following is NOT a requirement for forming an OSPF adjacency?
• What command is used to provide overall counters related to all active VPNs?
• What is the command to set the output method for screen outputs?
• What process name is used specifically for FortiGuard web filtering?
• Which command is used to display the HA virtual MAC address?
• What indicates a problem with connection establishment in the debug output?
• What session flag would be used if a packet is not being checked by IPS?
• What is the use of a "gateway address" in a static route configuration?
• What priority is given to static routes in the route selection process?
• What command is used to display the Policy route list in FortiGate?
• What layer of FortiOS architecture does an application process or daemon run on?
• What is the benefit of increasing the session timeout value on FortiGate?
• Which command initiates real-time debugging for BGP?
• Which command is best for showing specific details about OSPF configurations?
• What command shows the FIB router information?
• When considering dynamic routes, what is the third step in route selection?
• What setting must be enabled for an ADVPN configuration between Hub1 and Hub2?
• What must be the status of the link health monitor for a static route to be added by FortiGate?
• Which process name is associated with proxies and WAN optimization?
• What is the primary function of the command 'diagnose debug rating'?
• What does the command 'diagnose test application ipsmonitor 99' do?
• Which command allows you to view the IPsec SA for all active tunnels?
• Which command provides a summary of all LSDB entries on FortiGate, ordered by LSA type?
• What is the purpose of the command 'config system fortiguard'?
• In a hub-and-spoke topology, which IBGP setting must be enabled for ADVPN?
• Which command would you use to obtain a summary of the current active processes?
• What does a "reverse path check fail" error in debug flow indicate?
• Which TCP protocol state is associated with an established connection?
• Which command displays all active routes in the routing table on FortiGate?
• Which command would you use to confirm OSPF neighbor connectivity?
• What process name provides GUI access?
• What command summarizes the statuses of all the OSPF neighbors?
• What command is essential for enabling detailed BGP session logging?
• Which setting must be enabled in a spoke IPsec phase 1 configuration to participate in ADVPN?
• Which command displays current IPsec SA information for active tunnels?
• What is the command set to govern FortiGate behavior for proxy-based inspection while in conserve mode?
• Which command would you use to obtain a summary of OSPF interface statistics?
• What value represents the proto_state for UDP?
• What is the primary purpose of the process name 'scanunitd'?
• Which command is best for viewing the health and state of routing and interface on FortiGate?
• Which two configuration changes can help optimize memory usage on FortiGate?
• What does SSL certificate inspection allow FortiGate to evaluate?
• Which command provides a list of servers used for web filtering and antispam?
• Which command displays the current categories configured on the device?
• What does the term 'SYN_SENT' signify in a TCP session?
• What condition must NOT exist for FortiGate to add a static route?
• What command allows you to connect to the CLI of any device in the HA pair?
• Which session flag denotes that the traffic is being offloaded to the NPU?
• What is the state representation for UDP traffic in both directions?
• What is the purpose of the kernel object dentry_cache?
• What command is utilized to see a detailed output of the device’s firmware version and status?
• What does the command 'config system ha' enable a user to do?
• Who advertises Type 2 LSA Network Link Advertisements?
• Which proto_state indicates that a TCP connection is actively being listened on?
• Which kernel object is utilized for ARP caching?
• True or False: FortiManage can act as a private FortiGuard distribution server (FDS) for managed devices.
• Which command is used to exit the system configuration for High Availability?
• Which command would provide current statistics about OSPF in the FortiGate?
• What does the session flag 'br' indicate regarding the mode of traffic?
• True or False: Type 1 LSAs are advertised outside of the area they belong to.
• In FortiGate, the threshold at which it starts dropping new sessions is referred to as what?
• Which of the following indicates a valid configuration for FortiGate routes?
• Which TCP state indicates an established session and confirmed connection?
• What command is used to list details about type-a LSAs?
• Which statement about administrative domains (ADOMs) on FortiManager is true?
• What command is used to view system performance status, including CPU and memory use?
• What command is used to display the expectations of a session helper?
• What term describes the kernel object responsible for managing ARP information?
• What command should be used to make adjustments to web filtering?
• Which command shows the details of the prefix advertised by a neighbor?
• What command is employed to display the amount of shared memory by processes?
• What is the priority of the routing table in relation to the RPF?
• To display the categories of web filtering, which command is appropriate?
• Which TCP state is defined by proto_state=04?
• For which task is the process name 'authd' responsible?
• Which command would you use to toggle the IPS engine enable/disable status?
• In FortiGate's route selection process, which is considered first?
• What command set is used to enable/disable longer than screen outputs?
• What session flag indicates that a session is being logged?
• What session flag indicates web caching?
• In the command diagnose debug rating, what does the D flag indicate?
• What does the process name 'hasync' relate to?
• What is the function of the command 'diagnose test application ipsmonitor 1'?
• In the case where a static route is not added, what could be the reason related to interface status?
• The process responsible for explicit proxy functions is known as?
• Which command would you use to display both active and inactive routes in the routing table?
• Which command would you use to check routing information on FortiGate devices?
• Given the output showing a real-time debug, what common reason could indicate why the update is failing?
• What does the debug output showing phase 2 negotiation indicate?
• Which proto_state value indicates the TIME_WAIT TCP state?
• What command is used to force an update on the FortiGuard services?
• Which process is responsible for logs collection and automation stitches?
• What command provides direct information about shared memory statistics?