NSE7_EFW-7.2 by Fortinet Actual Free Exam Questions And Answers

Question 1

Refer to the exhibit, which shows a network diagram.

Which protocol should you use to configure the FortiGate cluster?

A. FGSP

B. FGCP in active-active mode

C. VRRP

D. FGCP in active-passive mode

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 2

Exhibit.

Refer to the exhibit which provides information on BGP neighbors
What can you conclude from this command output?

A. The local FortiGate starts sending its routing table with its iBGP peer

B. The local FortiGate has initiated a TCP connection, but there is no response from its BGP peer

C. The local FortiGate is missing the config neighbor command in its BGP configuration

D. The local FortiGate is having a fully established and active BGP connection with its peer

Discussion 0

Correct Answer: B Vote an answer

Question 3

Refer to the exhibit, which shows a routing table.

What two options can you configure in OSPF to block the advertisement of the 10.1.10.0 prefix? (Choose two.)

A. Disable Redistribute Connected

B. Configure a route-map out

C. Remove the 16.1.10.C prefix from the OSPF network

D. Configure a distribute-list-out

Discussion 0

Correct Answer: B,D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 4

Exhibit.

Refer to the exhibit, which shows information about an OSPF interlace
What two conclusions can you draw from this command output? (Choose two.)

A. NGFW-1 is the designated router

B. The OSPF routers are in the area ID of 0.0.0.1.

C. The port3 network has more man one OSPF router

D. The interfaces of the OSPF routers match the MTU value that is configured as 1500.

Discussion 0

Correct Answer: C,D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 5

Refer to the exhibit, which shows device registration on FortiManager.

What can you conclude about the Spoke-1 and Spoke-2 configurations with respect to the information cond:
Modified (recent auto-updated)?

A. Based on the policy configuration on NGFW-1, the configuration on both spokes is modified and automatically updated.

B. Spoke-1 and Spoke-2 are sharing the same security policy configuration and the same policy package.

C. On NGFW-A, the configuration was changed and spokes are wailing for an autoupdate.

D. On both Spoke-1 and Spoke-2, the configuration was changed directly on the FortiGate device, and the changes were automatically retrieved by the device database.

Discussion 0

Correct Answer: C Vote an answer

Question 6

Exhibit.

Refer to exhibit, which shows a central management configuration
Which server will FortiGate choose for web filler rating requests if 10.0.1.240 is experiencing an outage?

A. 10.0.1.242

B. Public FortiGuard servers

C. 10.0.1.243

D. 10.0.1.244

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 7

Which two features are true regarding IPS hardware acceleration? (Choose two.)

A. cp-accel-iaode advanced option is available only on FortiGate devices that have one or more CP8 processors

B. FortiGate does not support IPSA if the cp-accel-mode is configured as none.

C. set np-access-mode basic will provide last path for IPS inspected traffic

D. Network processors provide pre-IPS anomaly filtering and logging

Discussion 0

Correct Answer: A,C Vote an answer

Question 8

Exhibit.

Refer to the exhibit, which contains a partial VPN configuration.
What can you conclude from this configuration1?

A. The VPN should use the dynamic routing protocol to exchange routing information Through the tunnels.

B. The routing table shows a single IPSec virtual interface.

C. FortiGate creates separate virtual interfaces for each dial up client.

D. Dead peer detection s disabled.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 9

What is true about the Fitter override option in the application control profile?

A. Helps to categorize applications based on behavior risk or on technology

B. Helps to control specific signature and applications

C. Helps to configure actions for predefined categories

D. Helps to view the application control signatures for a specific category

Discussion 0

Correct Answer: A Vote an answer

Fortinet NSE 7 - Enterprise Firewall 7.2 - NSE7_EFW-7.2 Exam Practice Test

Contact Us

Useful Links

Latest Updated