Fortinet NSE7_EFW-7.2 Exam Questions Instant Access

Question 1

Exhibit.

Refer to the exhibit, which contains a CLI script configuration on FortiManager.

An administrator configured the CLI script on FortiManager Which statement is true based on the script configuration?

AThe script successfully added a static route with gateway 10.20.121.2 on the manages device

BCLI scripts must start with # l.

CThe commands are missing d3_cmd at beginning

DThe CLI scripts failed to execute because of an incomplete command

Answer : D

Question 2

What is true about the Fitter override option in the application control profile?

AHelps to configure actions for predefined categories

BHelps to categorize applications based on behavior risk or on technology

CHelps to view the application control signatures for a specific category

DHelps to control specific signature and applications

Answer : B

Question 3

What are two functions of automation stitches? (Choose two.)

AAutomation stitches can be created to run diagnostic commands and email the results when CPU or memory usage exceeds specified thresholds.

BAn automation stitch configured to execute actions in parallel can be set to insert a specific delay between actions.

CAutomation stitches can be configured on any FortiGate device in a Security Fabric environment.

DAn automation stitch configured to execute actions sequentially can take parameters from previous actions as input for the current action.

Answer : A, D

Question 4

An administrator configured the following command on FortiGate

config router ospf

sec reszart-mode graceful-restart

Which two statements correctly describe the result of the above command? (Choose two.)

AFortiGate is configured with graceful restart and will exit graceful mode, if the network topology changes

BAfter the default 40 seconds wait time the OSPF neighbors will resume communication with the restarting router

CThe OSPF neighbor that receives the grace link-state advertisement (LSA) will enter into helper mode

DIn an HA cluster FortiGate devices will keep the OSPF routes in their routing table to avoid traffic interruption during an HA failover

Answer : B, C

Question 5

Refer to the exhibit.

The partial interlace configurator! of two FortiGate devices is shown

Which two conclusions can you draw from this configuration? (Choose two.)

AYou can include 4.4.4.4 and 4.4.4.2 IP addresses using sat vrdst command

BAt the time of failover, FortiGate_A will change its priority to 30

CBy default, preemption mode is enabled

DIn VRRP, you are restricted to add a third FortiGate into VRRP group 1.

Answer : B, C

Question 6

Refer to the exhibit, which shows an error in system fortiguard configuration.

What is the reason you cannot set the protocol to udp in config system fortiguard?

AFortiManager provides FortiGuard.

Bfortiguard-anycast is set to enable.

CYou do not have the corresponding write access.

Dudp is not a protocol option.

Answer : B

The reason for the command failure when trying to set the protocol to UDP in the config system fortiguard is likely that UDP is not a protocol option in this context. The command syntax might be incorrect or the option to set a protocol for FortiGuard updates might not exist in this manner. So the correct answer is D. udp is not a protocol option.

Question 7

In which two ways does FortiManager function when it is deployed as a local FDS? (Choose two.)

AIt caches available firmware updates for both managed and unmanaged devices

BIt can be configured as an update server a rating server or both

CIt functions as rating server only for web filtering and antispam services

DIt downloads license information for registered and unregistered devices

Answer : B, C

Fortinet NSE 7 - Enterprise Firewall 7.2 NSE7_EFW-7.2 Exam Questions