Fortinet NSE7_EFW-7.2 Exam Practice Test Instant Access

Question 1

Refer to the exhibit.

The partial interlace configurator! of two FortiGate devices is shown

Which two conclusions can you draw from this configuration? (Choose two.)

AYou can include 4.4.4.4 and 4.4.4.2 IP addresses using sat vrdst command

BAt the time of failover, FortiGate_A will change its priority to 30

CBy default, preemption mode is enabled

DIn VRRP, you are restricted to add a third FortiGate into VRRP group 1.

Answer : B, C

Question 2

Which ADVPN configuration must be configured using a script on fortiManager, when using VPN Manager to manage fortiGate VPN tunnels?

AEnable AD-VPN in IPsec phase 1

BDisable add-route on hub

CConfigure IP addresses on IPsec virtual interfaces

DSet protected network to all

Answer : A

To enable AD-VPN, you need to edit an SD-WAN overlay template and enable the Auto-Discovery VPN toggle. This will automatically add the required settings to the IPsec template and the BGP template. You cannot enable AD-VPN directly in the IPsec phase 1 settings using VPN Manager.Reference:=ADVPN | FortiManager 7.2.0 - Fortinet Documentation

Question 3

Which three conditions are required (or two FortiGate devices to form an OSPF adjacency? (Choose three.)

AOSPF peer interface must have same cost value

BOSPF peer interface must have same MTU size

COSPF peer interface must have same Hello and Wait time

DOSPF peer interface must have same Hello and Dead time

EOSPF peer interfaces must have same network and mask

Answer : B, D, E

Question 4

In which two ways does FortiManager function when it is deployed as a local FDS? (Choose two.)

AIt caches available firmware updates for both managed and unmanaged devices

BIt can be configured as an update server a rating server or both

CIt functions as rating server only for web filtering and antispam services

DIt downloads license information for registered and unregistered devices

Answer : B, C

Question 5

Refer to the exhibits, which contain the network topology and BGP configuration for a hub.

Exhibit A.

Exhibit B.

An administrator is trying to configure ADVPN with a hub and spoke VPN setup using iBGP. All the VPNs are up and connected to the hub. The hub is receiving route information from both spokes over iBGP; however the spokes are not receiving route information from each other.

What change must the administrator make to the hub BGP configuration so that the routes learned from one spoke are forwarded to the other spoke?

AConfigure the hub as a route reflector

BConfigure auto-discovery-sender on the hub

CAdd a prefix list to the hub that permits routes to be shared between the spokes

DEnable route redistribution under config router bgp

Answer : B

Question 6

Exhibit.

ISFW is installed in the access layer NGFW is performing SNAT and web tittering DCFW is running IPS Which two statements are true regarding the Security Fabric logging? (Choose two.)

ADCFW is responsible for generating UTM logs for file server sessions initiated by Client-1. only if an IPS inspection is triggered

BISFW is responsible for generating traffic logs for only Web traffic and SMB traffic from Client-1.

CThe SMB session which is forwarded to NGFW logs that event

DDCFW generates traffic logs for all sessions from Corporate File Server

EThe web session forwarded to the NGFW generates the relevant UTM logs along with initial traffic log

Answer : A, B

Question 7

Refer to the exhibit.

Refer to the exhibit, which shows information about an OSPF interface

What two conclusions can you draw from this command output? (Choose two.)

ANGFW-1 sends its LSA updates to 224.0.0.6 address

BNGFW-1 sends its LSA updates to 224.0.0. 5 address

CNGFW-1 forms neighbor adjacency only with DR and BDR router.

DNGFW-1 forms neighbor adjacency only if other OSPF routers match the wait time of 40 seconds

Answer : A, C

Fortinet NSE7_EFW-7.2 Fortinet NSE 7 - Enterprise Firewall 7.2 Exam Practice Test