Fortinet NSE 7 - Enterprise Firewall 7.2 - NSE7_EFW-7.2 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

You want to improve reliability over a lossy IPSec tunnel.
Which combination of IPSec phase 1 parameters should you configure?

A. keepalive and keylive B. fec-ingress and fec-egress C. Odpd and dpd-retryinterval D. fragmentation and fragmentation-mtu

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

Refer to the exhibit, which contains information about an IPsec VPN tunnel.

What two conclusions can you draw from the command output? (Choose two.)

A. Dead peer detection is set to enable. B. Both IPsec SAs are loaded on the kernel. C. Forward error correction in phase 2 is set to enable. D. The IKE version is 2.

Discussion 0

Correct Answer: B,D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

Exhibit.

Refer to the exhibit, which shows a partial web filter profile conjuration What can you cone udo from this configuration about access to www.facebook, com, which is categorized as Social Networking?

A. The access is allowed based on the FortiGuard Category Based Filter configuration B. The access is hocked if the local or the public FortiGuard server does not reply C. The access is blocked based on the URL Filter configuration D. The access is blocked based on the Content Filter configuration

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 4

Exhibit.

Refer to the exhibit, which contains a partial policy configuration.
Which setting must you configure to allow SSH?

A. Specify SSH in the Service field B. Configure pot 22 in the Protocol Options field. C. Include SSH in the Application field D. Select an application control profile corresponding to SSH in the Security Profiles section

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 5

Which FortiGate in a Security I auric sends togs to FortiAnalyzer?

A. The FortiGate devices performing network address translation (NAT) or unified threat management (UTM). if configured. B. Each FortiGate in the Security fabric. C. Only the last FortiGate that handled a session in the Security Fabric D. Only the root FortiGate.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

How are bulk configuration changes made using FortiManager CLI scripts? (Choose two.)

A. When run on the Policy Package, ADOM database, you must use the installation wizard to apply the changes to the managed FortiGate device. B. When run on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation. C. When run on the All FortiGate in ADOM, changes are automatically installed without the creation of a new revision history. D. When run on the Device Database, changes are applied directly to the managed FortiGate device.

Discussion 0

Correct Answer: A,B Vote an answer

Question 7

After enabling IPS you receive feedback about traffic being dropped.
What could be the reason?

A. Np-accel-mode is set to enable B. Fail-open is set to disable C. Traffic-submit is set to disable D. IPS is configured to monitor

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 8

Exhibit.

Refer to the exhibit, which contains a CLI script configuration on fortiManager. An administrator configured the CLI script on FortiManager rut the script tailed to apply any changes to the managed device after being executed.
What are two reasons why the script did not make any changes to the managed device? (Choose two)

A. CLI scripts must start with #!. B. Incomplete commands can cause CLI scripts to fail. C. Static routes can be added using only TCI scripts. D. The commands that start with the # sign did not run.

Discussion 0

Correct Answer: B,D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 9

An administrator is configuring two FortiGate devices in an HA cluster. While configuring the devices, the administrator issues the following commands on both HA cluster members:

In which two ways do these commands impact the HA cluster? (Choose two.)

A. They force both HA devices for remote link monitoring to detect an issue in the forwarding path. B. They force the former primary to send gratuitous ARP packets when the failover happens to indicate that the virtual MAC address is now using a different device. C. They force the former primary to shut down all ts interfaces for one second when failover happens, excluding the heartbeat and reserved management interfaces. D. They force the switches to update their MAC forwarding tables, when failover happens.

Discussion 0

Correct Answer: B,C Vote an answer