Fortinet NSE 7 - Enterprise Firewall 7.0 - NSE7_EFW-7.0 Exam Practice Test

A. IKE is used to encapsulate ESP traffic in some situations, and IKE NAT-T is used only when the local FortiGate is using NAT on the IPsec interface.

B. They both use UDP as their transport protocol and the port number is configurable.

C. IKE is the standard implementation for IKEv1 and IKE NAT-T is an extension added in IKEv2.

D. They each use their own IP protocol number.

A. OSPF interface MTU.

B. OSPF interface area.

C. OSPF interface cost.

D. Interface subnet mask.

E. Router ID.

A. An automation stitch configured to execute actions sequentially can take parameters from previous actions as input for the current action.

B. An automation stitch configured to execute actions in parallel can be set to insert a specific delay between actions.

C. Automation stitches can be configured on any FortiGate device in a Security Fabric environment.

D. Automation stitches can be created to run diagnostic commands and attach the results to an email message when CPU or memory usage exceeds specified thresholds.

A. Branch FortiGate devices must be configured first.

B. All FortiGate devices in the Security Fabric must have bidirectional FortiTelemetry connectivity.

C. FortiGate uses FortiTelemetry protocol to communicate with FortiAnalyzer.

D. Only the root FortiGate collects network information and forwards it to FortiAnalyzer.

A. Increase the TCP session timers.

B. Increase the FortiGuard cache time to live.

C. Reduce the maximum file size to inspect.

D. Reduce the session time to live.

A. Incomplete commands are ignored in CLI scripts.

B. CLI scripts will add objects only if they are referenced by policies.

C. Static routes can only be added using TCL scripts.

D. Commands that start with the # sign are not executed.

A. Increase the TCP session timers.

B. Increase the FortiGuard cache time to live.

C. Reduce the maximum file size to inspect.

D. Reduce the session time to live.

A. To enable IPS bypass mode

B. To restart all IPS engines and monitors

C. To provide information regarding IPS sessions

D. To disable the IPS engine

A. A TCP session waiting for the SYN ACK

B. A UDP session with only one packet received

C. A UDP session with packets sent and received

D. A TCP session waiting for FIN ACK

A. The session must be removed from the former primary unit after an HA failover.

B. Traffic has been blocked by the antivirus inspection.

C. The next packet must be re-evaluated against the firewall policies.

D. Traffic has been identified as from an application that is not allowed.

A. The port1 default route has a lower priority value than the default route using port2.

B. The port1 default route has a lower distance than the default route using port2.

C. The port2 interface is disabled in the FortiGate configuration.

D. The port1 default route has a higher priority value than the default route using port2.

A. All of the neighbors displayed are part of a single BGP configuration on the local router with the neighbor-range set to a value of 4.

B. The BGP session with peer 10.127.0.75 is up.

C. The State/PfxRcd for neighbor 100.64.3.1 will not change until an administrator on the local router adjusts the inbound route filtering so that prefixes received can be added to the RIB.

D. The router 100.64.3.1 needs to update the local AS number in its BGP configuration in order to bring up the BGP session with the local router.