NSE7 Enterprise Firewall - FortiOS 5.4 Output Practice Questions

Examine the output of the ‘get router info bgp summary’ command shown in the exhibit; then answer the question below. Which statement can explain why the state of the remote BGP peer 10.200.3.1 is Connect?

• AA. The local peer is receiving the BGP keepalives from the remote peer but it has not received any BGP prefix yet.
• BB. The TCP session for the BGP connection to 10.200.3.1 is down.
• CC. The local peer has received the BGP prefixed from the remote peer.
• DD. The local peer is receiving the BGP keepalives from the remote peer but it has not received the OpenConfirm yet.

Examine the output of the ‘diagnose ips anomaly list’ command shown in the exhibit; then answer the question below. Which IP addresses are included in the output of this command?

• AA. Those whose traffic matches a DoS policy.
• BB. Those whose traffic matches an IPS sensor.
• CC. Those whose traffic exceeded a threshold of a matching DoS policy.
• DD. Those whose traffic was detected as an anomaly by an IPS sensor.

Correct answer: A

Was this answer correct?

Examine the output from the BGP real time debug shown in the exhibit, then the answer the question below: Which statements are true regarding the output in the exhibit? (Choose two.)

Select 2 answers.

• AA. BGP peers have successfully interchanged Open and Keepalive messages.
• BB. Local BGP peer received a prefix for a default route.
• CC. The state of the remote BGP peer is OpenConfirm.
• DD. The state of the remote BGP peer will go to Connect after it confirms the received prefixes.

Examine the output of the ‘diagnose sys session list expectation’ command shown in the exhibit; than answer the question below. Which statement is true regarding the session in the exhibit?

• AA. It was created by the FortiGate kernel to allow push updates from FotiGuard.
• BB. It is for management traffic terminating at the FortiGate.
• CC. It is for traffic originated from the FortiGate.
• DD. It was created by a session helper or ALG.

View the exhibit, which contains the partial output of a diagnose command, and then answer the question below. Based on the output, which of the following statements is correct?

• AA. Anti-reply is enabled.
• BB. DPD is disabled.
• CC. Quick mode selectors are disabled.
• DD. Remote gateway IP is 10.200.5.1.