NSE7_EFW-6.4 Fortinet NSE 7- Enterprise Firewall 6.4 Exams

Fortinet NSE 7 – Enterprise Firewall 6.4
Exam series: NSE7_EFW-6.4
Number of questions: 35
Exam time: 60 minutes
Language: English and Japanese
Product version: FortiOS 6.4
Status: Available
Exam details: exam description

NSE 7 Certification
The Fortinet Network Security Architect designation identifies your advanced skills in deploying, administering, and troubleshooting Fortinet security solutions. We recommend this certification for network and security professionals
who are involved in the advanced administration and support of security infrastructures using Fortinet solutions. Visit the Fortinet NSE Certification Program page for information about certification requirements.

Fortinet NSE 7—Enterprise Firewall 6.4 Exam
The Fortinet NSE 7—Enterprise Firewall 6.4 exam is part of the NSE 7 Network Security Architect program, and recognizes the successful candidate’s knowledge and expertise with Fortinet solutions in enterprise security
infrastructure environments.

The exam tests applied knowledge of the integration, administration, troubleshooting, and central management of an enterprise firewall solution composed of FortiOS 6.4, FortiManager 6.4, and FortiAnalyzer 6.4.

Audience
The Fortinet NSE 7—Enterprise Firewall 6.4 exam is intended for network and security professionals who are responsible for the design, administration, and support of an enterprise security infrastructure composed of many
FortiGate devices.

series NSE7_EFW-6.4
Time allowed 60 minutes
Exam questions 35 multiple-choice questions
Scoring Pass or fail, a score report is available from your Pearson VUE account
Language English and Japanese
Product version FortiOS 6.4, FortiManager 6.4, FortiAnalyzer 6.4

Exam Topics
Successful candidates have applied knowledge and skills in the following areas and tasks:
l System and session troubleshooting
l Perform initial configuration
l Implement the Fortinet Security Fabric
l Security Fabric
l FortiOS architecture
l Traffic and session monitoring
l High availability
l Central management
l Central management and analysis using FortiManager and FortiAnalyzer
l Content inspection
l FortiGuard
l Web filtering
l Antivirus
l Intrusion Prevention System (IPS)
l Routing and Layer 2 switching
l Static routing
l Dynamic routing: OSPF, Border Gateway Protocol (BGP)
l VPN
l IPsec
l Autodiscovery VPN (ADVPN)

Training Resources
The following resources are recommended for attaining the knowledge and skills that are covered on the exam. The recommended training is available as a foundation for exam preparation. In addition to training, candidates are
strongly encouraged to have hands-on experience with the exam topics and objectives.

NSE Training Institute Courses
l NSE 7 Enterprise Firewall
l NSE 4 FortiGate Security
l NSE 4 FortiGate Infrastructure
l NSE 5 FortiManager
l NSE 5 FortiAnalyzer

Other Resources
l Fortinet Technical Documentation
l Fortinet Knowledge Base

Experience
You should be familiar with the design, administration, and support of an enterprise security infrastructure using FortiGate devices.

Exam Sample Questions
A set of sample questions is available from the NSE Training Institute. These questions sample the exam content in question type and content scope. However, the questions do not necessarily represent all the exam content, nor are
they intended to assess an individual’s readiness to take the certification exam.

Examination Policies and Procedures
The NSE Training Institute recommends that candidates review exam policies and procedures before registering for the exam. Access important information on the Program Polices page, and find answers to common questions on the

FAQ page.
Questions?
If you have more questions about the NSE Program, contact your regional training team.
l Americas – training@fortinet.com
l Asia, Pacific, India – apactraining@fortinet.com
l Europe, Middle East, Africa – emeatraining@fortinet.com

QUESTION 1
Which two tasks are automated using the Install Wizard on FortiManager? (Choose two.)

A. Installing configuration changes to managed devices
B. Importing interface mappings from managed devices
C. Adding devices to FortiManager
D. Previewing pending configuration changes for managed devices

Answer: A,D

QUESTION 2
When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filter web requests when the client browser does not provide the server name indication (SNI) extension?

A. FortiGate uses the CN information from the Subject field in the server certificate.
B. FortiGate switches to the full SSL inspection method to decrypt the data.
C. FortiGate uses the requested URL from the userâ€™s web browser.
D. FortiGate blocks the request without any further inspection.

Answer: A

QUESTION 3
Which two statements about OCVPN are true? (Choose two.)

A. Only root vdom supports OCVPN.
B. OCVPN supports static and dynamic IPs in WAN interface.
C. OCVPN offers only Hub-Spoke VPNs.
D. FortiGate devices under different FortiCare accounts can be used to form OCVPN.

Answer: A,B