PrepAway - Latest Free Exam Questions & Answers

Category: NSE7

Exam NSE7: Fortinet Troubleshooting Professional

Which outbound interface or interfaces will be used by …

Examine the following partial outputs from two routing debug commands; then answer the question below.
# get router info kernel
tab=254 vf=0 scope=0 type=1 proto=11 prio=0 0.0.0.0/0.0.0.0/0->0.0.0.0/0 pref=0.0.0.0
gwy=10.200.1.254 dev=2(port1)
tab=254 vf=0 scope=0 type=1 proto=11 prio=10 0.0.0.0/0.0.0.0/0->0.0.0.0/0 pref=0.0.0.0
gwy=10.200.2.254 dev=3(port2)
tab=254 vf=0 scope=253 type=1 proto=2 prio=0 0.0.0.0/0.0.0.0/.->10.0.1.0/24 pref=10.0.1.254
gwy=0.0.0.0 dev=4(port3)
# get router info routing-table all
s* 0.0.0.0/0 [10/0] via 10.200.1.254, port1
[10/0] via 10.200.2.254, port2, [10/0]
c 10.0.1.0/24 is directly connected, port3
c 10.200.1.0/24 is directly connected, port1
c 10.200.2.0/24 is directly connected, port2
Which outbound interface or interfaces will be used by this FortiGate to route web traffic from internal users to the Internet?

Why the default route using port2 is not displayed in t…

Examine the following partial outputs from two routing debug commands; then answer the question below.
# get router info routing-table database
s 0.0.0.0/0 [20/0] via 10.200.2.254, port2, [10/0]
s *> 0.0.0.0/0 [10/0] via 10.200.1.254, port1
# get router info routing-table all
s* 0.0.0.0/0 [10/0] via 10.200.1.254, port1
Why the default route using port2 is not displayed in the output of the second command?

Which TCP session timer must be increased to fix this p…

An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage. However, after the changes, one network application started to
have problems. During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before the
arrival of the SYN/ACKs. When the SYN/ACK packets arrive to the FortiGate, the unit has already deleted the respective sessions. Which TCP session timer must
be increased to fix this problem?

Which statements are true regarding the two entries in …

A FortiGate’s port1 is connected to a private network. Its port2 is connected to the Internet. Explicit web proxy is enabled in port1 and only explicit web proxy
users can access the Internet. Web cache is NOT enabled. An internal web proxy user is downloading a file from the Internet via HTTP. Which statements are true
regarding the two entries in the FortiGate session table related with this traffic? (Choose two.)


Page 2 of 3123