Free Fortinet NSE7_FSN_AR-7.6 Exam Questions

Question 1

Refer to the exhibit, which shows the port1 interface configuration on FortiGate and partial sessioninformation for ICMP traffic.What happens to the session information if a routing change occurs that affects this session?

A : Only the interface and gateway information for dev=7 will be removed.

B : The session information will not change unless the current route has been removed from the routing table.

C : The session will be flagged as dirty but no route lookups will be performed.

D : Sessions involving port7 or port19 will not have their routing information flushed.

Answer: B

Question 2

Refer to the exhibit, which shows the port1 interface configuration on FortiGate and partial sessioninformation for ICMP traffic.What happens to the session information if a routing change occurs that affects this session?

A : Only the interface and gateway information for dev=7 will be removed.

B : The session information will not change unless the current route has been removed from the routing table.

C : The session will be flagged as dirty but no route lookups will be performed.

D : Sessions involving port7 or port19 will not have their routing information flushed.

Answer: B

Question 3

Which authentication option can you not configure under config user radius on FortiOS?

A : mschap

B : pap

C : mschap2

D : eap

Answer: D

Question 4

Refer to the exhibit, which shows a truncated output of a real-time LDAP debug.What two conclusions can you draw from the output? (Choose two.)

A : The name of the configured LDAP server is Lab.

B : The user is authenticating using CN=John Smith.

C : FortiOS is able to locate the user in step 3 (Bind Request) of the LDAP authentication process.

D : FortiOS is performing the second step (Search Request) in the LDAP authentication process.

Answer: A,D

Question 5

Refer to the exhibit, which shows the output of a real-time debug. Which statement about this output is true? (Choose one answer)

A : The server hostname was extracted from the SNI in the client request, or from the CN in the server certificate.

B : FortiGate found the requested URL in its local cache.

C : This web request was inspected using the ftgd-allow web filter profile.

D : The requested URL belongs to category ID 255.

Answer: A