Free Fortinet NSE7_EFW-7.2 Exam Questions

Become Fortinet Certified with updated NSE7_EFW-7.2 exam questions and correct answers

Page: 1 / 16

Total 80 Questions | Updated On: Jan 02, 2024

Add To Cart

Question 1

Refer to the exhibit, which shows an error in system fortiguard configuration.

What is the reason you cannot set the protocol to udp in config system fortiguard?

A : FortiManager provides FortiGuard.

B : fortiguard-anycast is set to enable.

C : You do not have the corresponding write access.

D : udp is not a protocol option.

Answer: D

Question 2

Exhibit.

Refer to the exhibit, which shows information about an OSPF interlace What two conclusions can you draw from this command output? (Choose two.)

A : The port3 network has more man one OSPF router

B : The OSPF routers are in the area ID of 0.0.0.1.

C : The interfaces of the OSPF routers match the MTU value that is configured as 1500.

D : NGFW-1 is the designated router

Answer: A,D

Question 3

Exhibit.

Refer to the exhibit, which contains an active-active toad balancing scenario. During the traffic flow the primary FortiGate forwards the SYN packet to the secondary FortiGate. What is the destination MAC address or addresses when packets are forwarded from the primary FortiGate to the secondary FortiGate?

A : Secondary physical MAC port1

B : Secondary virtual MAC port1

C : Secondary virtual MAC port1 then physical MAC port1

D : Secondary physical MAC port2 then virtual MAC port2

Answer: B

Question 4

You want to improve reliability over a lossy IPSec tunnel. Which combination of IPSec phase 1 parameters should you configure?

A : fec-ingress and fec-egress

B : Odpd and dpd-retryinterval

C : fragmentation and fragmentation-mtu

D : keepalive and keylive

Answer: A

Question 5

You want to block access to the website ww.eicar.orgusing a custom IPS signature. Which custom IPS signature should you configure?

A :

B :

C :

D :

Answer: D

Page: 1 / 16

Total 80 Questions | Updated On: Jan 02, 2024

Add To Cart