Fortinet NSE7_FSN_AR-7.6 Exam : Fortinet NSE 7 - Secure Networking 7.6 Architect

Refer to the exhibit, which shows the output of a diagnose command.

What two conclusions can you draw from the output shown in the exhibit? (Choose two answers)

• A. This is a pinhole session created to allow traffic for a protocol that requires additional sessions to operate through FortiGate.
• B. Traffic in the original direction (coming from the IP address 10.171.121.38) will be routed to the next- hop IP address 10.0.1.10.
• C. This is an expected session created by the IPS engine.
• D. Traffic in the original direction (coming from the IP address 10.171.121.38) will be routed to the next- hop IP address 10.200.1.1.

Refer to the exhibit, which shows the output of diagnose sys session list.

If the HA ID for the primary device is 0, what happens if the primary fails and the secondary becomes the primary?

• A. The session state is preserved but the kernel will need to re-evaluate the session because NAT was applied.
• B. Traffic for this session continues to be permitted on the new primary device after failover, without requiring the client to restart the session with the server.
• C. The session will be removed from the session table of the secondary device because of the presence of allowed error packets, which will force the client to restart the session with the server.
• D. The secondary device has this session synchronized; however, because application control is applied, the session is marked dirty and has to be re-evaluated after failover.

Exhibit.

Refer to the exhibit, which shows a partial web fillet profile configuration.
Which action does FortiGate lake if a user attempts to access www. dropbox. com, which is categorized as File Sharing and Storage?

• A. FortiGate blocks the connection as an invalid URL.
• B. FortiGate blocks the connection, based on the FortiGuard category based filter configuration.
• C. FortiGate exempts the connection, based on the Web Content Filter configuration.
• D. FortiGate allows the connection, based on the URL Filter configuration.

Refer to the exhibit.

The administrator did not override the FortiGuard FODN or IP address in the FortiGate configuration Which IP address did FortiGate get when resolving the servicem,fortiguard.net name?

• A. 208.91.112.194
• B. 96.45.33.65
• C. 64.26.151.37
• D. 209.22.147.36

Refer to the exhibit.

If the default settings are m place, what can you conclude about the conserve mode shown in the exhibit?

• A. FortiGate is currently allowing new sessions that require flow-based content inspection and blocking sessions that require proxy-based content inspection
• B. FortiGate is currently allowing new sessions and will continue to allow sessions if memory increases another 6%.
• C. FortiGate is currently blocking all new sessions regardless of the content inspection requirements or configuration settings because of high memory use.
• D. FortiGate is currently allowing now sessions that require flow-based or proxy-based content inspection, but is not performing inspection on those sessions.