NSE7_EFW Question 17

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  Study guide page 300 check-protocol-header strict = NPs and CPs disable check-protocol-header loose = default = NPs and CPs enable

• Chose C1

  This is the updated question: A. Set strict-dirty-session-check enable command instructs the FortiGate to load all dirty session traffic to its SPU B. set check-protocol-header loose command enables hardware acceleration on this FortiGate device C. set av-fail open pass command instructs the FortiGate to load all traffic that uses the antivirus proxy to NP D. Set memory-use-threshold-extreme, command instructs the FortiGate to disable hardware acceleration, if the memory extreme threshold reaches 95%.

• Chose C3

  the output does not explicitly reference any commands or parameters related to enabling or disabling Network Processors (NPs) or Content Processors (CPs). However, let's analyze the available settings for a conclusion: set av-failopen pass This indicates that antivirus scanning will allow traffic to pass even if the antivirus engine encounters an error. It does not directly affect the status of NPs or CPs. set check-protocol-header loose This loosens the protocol header checks for traffic. Again, this does not directly indicate the status of NPs or CPs. set memory-use-threshold-extreme 95 This sets the memory utilization threshold at which extreme measures may be taken, but it does not indicate anything about NPs or CPs. set strict-dirty-session-check enable This ensures stricter checks on session consistency, but it does not influence the NP or CP settings. Conclusion: The configuration does not explicitly disable NPs or CPs. Therefore, the correct conclusion is: C. NPs and CPs are enabled