Official Bank 0/91

Fortinet NSE 7 – Enterprise Firewall 6.0 Exam (NSE7_EFW-6.0) - Fortinet Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
91 Total Questions
1
Question
Examine the following partial outputs from two routing debug commands; then answer the question

Exhibit

below: Why the default route using port2 is not displayed in the output of the second command?
Options
A It has a higher distance than the default route using port1.
B It has a lower priority than the default route using port1.
C It has a higher priority than the default route using port1.
D It is disabled in the FortiGate configuration.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
An administrator cannot connect to the GIU of a FortiGate unit with the IP address 10.0.1.254. The administrator runs the debug flow while attempting the connection using HTTP. The output of the

Exhibit

Based on the error displayed by the debug flow, which are valid reasons for this problem? (Choose debug flow is shown in the exhibit: two.) A.
Options
A C.
B HTTP administrative access is disabled in the FortiGate interface with the IP address 10.0.1.254.
Redirection of HTTP to HTTPS administrative access is disabled.
HTTP administrative access is configured with a port number different than 80.
The packet is denied because of reverse path forwarding check.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
View the exhibit, which contains the output of a diagnose command, and the answer the question below.

Exhibit

Which statements are true regarding the Weight value?
Options
A Its initial value is statically set to 10.
B Its initial value is calculated based on the round trip delay (RTT).
C Its value is incremented with each packet lost.
D It determines which FortiGuard server is used for license validation.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Which of the following conditions must be met for a static route to be active in the routing table? (Choose two.)
Select 2
Options
A The link health monitor (if configured) is up.
B There is no other route, to the same destination, with a higher distance.
C The next-hop IP address is up.
D The outgoing interface is up.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
When does a RADIUS server send an Access-Challenge packet?
Options
A The server requires more information from the user, such as the token code for two-factor authentication.
B The user credentials are wrong.
C The server does not have the user credentials yet.
D The user account is not found in the server.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.