Free Fortinet NSE7_EFW-7.2 Exam Questions

Become Fortinet Certified with updated NSE7_EFW-7.2 exam questions and correct answers

Page: 1 / 16

Total 80 Questions | Updated On: Jun 05, 2025

Add To Cart

Question 1

Which two statements about metadata variables are true? (Choose two.)

A : You create them on FortiGate

B : They apply only to non-firewall objects.

C : The metadata format is $.

D : They can be used as variables in scripts

Answer: B,D

Question 2

Refer to the exhibit, which shows a custom signature.

Which two modifications must you apply to the configuration of this custom signature so that you can save it on FortiGate? (Choose two.)

A : Add severity.

B : Add attack_id.

C : Ensure that the header syntax is F-SBID.

D : Start options with --.

Answer: A,B

Question 3

You want to block access to the website ww.eicar.orgusing a custom IPS signature. Which custom IPS signature should you configure?

A :

B :

C :

D :

Answer: D

Question 4

Which two statements about IKE vision 2 are true? (Choose two.)

A : Phase 1 includes main mode

B : It supports the extensible authentication protocol (EAP)

C : It supports the XAuth protocol.

D : It exchanges a minimum of four messages to establish a secure tunnel

Answer: B,D

Question 5

Exhibit.

Refer to the exhibit, which contains an active-active toad balancing scenario. During the traffic flow the primary FortiGate forwards the SYN packet to the secondary FortiGate. What is the destination MAC address or addresses when packets are forwarded from the primary FortiGate to the secondary FortiGate?

A : Secondary physical MAC port1

B : Secondary virtual MAC port1

C : Secondary virtual MAC port1 then physical MAC port1

D : Secondary physical MAC port2 then virtual MAC port2

Answer: B

Page: 1 / 16

Total 80 Questions | Updated On: Jun 05, 2025

Add To Cart