Passed Exam Today NSE7_EFW-6.4

Fortinet NSE 7 - Enterprise Firewall 7.0 Questions and Answers

Question 17

View the global IPS configuration, and then answer the question below.

Which of the following statements is true regarding this configuration?

IPS will scan every byte in every session.

FortiGate will spawn IPS engine instances based on the system load.

New packets will be passed through without inspection if the IPS socket buffer runs out of memory.

IPS will use the faster matching algorithm which is only available for units with more than 4 GB memory.

Question 18

When does a RADIUS server send an Access-Challenge packet?

The server does not have the user credentials yet.

The server requires more information from the user, such as the token code for two-factor authentication.

The user credentials are wrong.

The user account is not found in the server.