Free Fortinet NSE7 Exam Dumps Questions & Answers

An administrator has configured a dial-up IPsec VPN with one phase 2, extended authentication (XAuth) and IKE mode configuration. The administrator has also enabled the IKE real time debug:
diagnose debug application ike-1
diagnose debug enable
In which order is each step and phase displayed in the debug output each time a new dial-up user is connecting to the VPN?

• A.  Phase1; IKE mode configuration; XAuth; phase 2.
• B.  Phase1; XAuth; phase 2; IKE mode configuration.
• C.  Phase1; IKE mode configuration; phase 2; XAuth.
• D.  Phase1; XAuth; IKE mode configuration; phase2.

Which of the following conditions must be met for a static route to be active in the routing table? (Choose three.)

• A.  The link health monitor (if configured) is up.
• B.  There is no other route, to the same destination, with a higher distance.
• C.  The next-hop IP address is up.
• D.  The outgoing interface is up.
• E.  The next-hop IP address belongs to one of the outgoing interface subnets.

When using the SSL certificate inspection method for HTTPS traffic, how does FortiGate filter web requests when the browser client does not provide the server name indication (SNI)?

• A.  FortiGate blocks the request without any further inspection.
• B.  FortiGate uses the Issued To: field in the server's certificate.
• C.  FortiGate switches to the full SSL inspection method to decrypt the data.
• D.  FortiGate uses the requested URL from the user's web browser.

Which real time debug should an administrator enable to troubleshoot RADIUS authentication problems?

• A.  Diagnose authd console -log enable.
• B.  Diagnose radius console -log enable.
• C.  Diagnose debug application fnbamd -1.
• D.  Diagnose debug application radius -1.

The logs in a FSSO collector agent (CA) are showing the following error:
failed to connect to registry: PIKA1026 (192.168.12.232)
What can be the reason for this error?

• A.  The CA cannot reach the FortiGate with the IP address 192.168.12.232.
• B.  The remote registry service is not running in the workstation 192.168.12.232.
• C.  The FortiGate cannot resolve the name of the workstation.
• D.  The CA cannot resolve the name of the workstation.