Fortinet NSE7_EFW-7.2 Exam Real Questions

Prepare and pass your Fortinet NSE 7 - Enterprise Firewall 7.2 with free NSE7_EFW-7.2 exam questions.

Page: 1 / 10

Total 50 Questions | Updated On: Oct 23, 2024

Add To Cart

Question 1

Which two statements about IKE vision 2 are true? (Choose two.)

A : Phase 1 includes main mode

B : It supports the extensible authentication protocol (EAP)

C : It supports the XAuth protocol.

D : It exchanges a minimum of four messages to establish a secure tunnel

Answer: B,D

Question 2

You want to configure faster failure detection for BGP Which parameter should you enable on both connected FortiGate devices?

A : Ebgp-enforce-multihop

B : bfd

C : Distribute-list-in

D : Graceful-restart

Answer: B

Question 3

After enabling IPS you receive feedback about traffic being dropped. What could be thereason?

A : Np-accel-mode is set to enable

B : Traffic-submit is set to disable

C : IPS is configured to monitor

D : Fail-open is set to disable

Answer: D

Question 4

Refer to the exhibit, which shows an error in system fortiguard configuration.

What is the reason you cannot set the protocol to udp in config system fortiguard?

A : FortiManager provides FortiGuard.

B : fortiguard-anycast is set to enable.

C : You do not have the corresponding write access.

D : udp is not a protocol option.

Answer: D

Question 5

You want to improve reliability over a lossy IPSec tunnel. Which combination of IPSec phase 1 parameters should you configure?

A : fec-ingress and fec-egress

B : Odpd and dpd-retryinterval

C : fragmentation and fragmentation-mtu

D : keepalive and keylive

Answer: A

Page: 1 / 10

Total 50 Questions | Updated On: Oct 23, 2024

Add To Cart