Fortinet NSE 7 - Enterprise Firewall 7.2 (NSE7_EFW-7.2) Free Practice Test

Question 1

Refer to the exhibit, which contains a partial configuration of the global system.

What can you conclude from the output?

A. set av-failopen pass command instructs the FortiGate to offload all traffic that uses the antivirus proxy to NP.

B. set memory-use-threshoId-extreme command instructs the FortiGate to disable hardware acceleration if the memory extreme threshold reaches 95%

C. set strict-d^rty-session-check enable command instructs the FortiGate to offload all dirty session traffic to its SPU

D. set check-protocol-header loose command enables hardware acceleration on this FortiGate device.

Correct Answer: D

Question 2

Exhibit.

Refer to the exhibit, which contains a CLI script configuration on FortiManager.
An administrator configured the CLI script on FortiManager Which statement is true based on the script configuration?

A. The script successfully added a static route with gateway 10.20.121.2 on the manages device

B. The commands are missing d3_cmd at beginning

C. The CLI scripts failed to execute because of an incomplete command

D. CLI scripts must start with # l.

Correct Answer: C

Question 3

Refer to the exhibit, which shows an SSL certification inspection configuration.

Which action does FortiGate take if the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate?

A. FortiGate uses the CN information from the Subject field in the server certificate

B. FortiGate closes the connection because this represents an invalid SSL/TLS configuration

C. FortiGate uses the SNI from the user's web browser.

D. FortiGate uses the first entry listed in the SAN field in the server certificate

Correct Answer: B

Question 4

In which two ways does fortiManager function when it is deployed as a local FDS? (Choose two)

A. It caches available firmware updates for unmanaged devices

B. It provides VM license validation services

C. It supports rating requests from non-FortiGate devices.

D. lt can be configured as an update server a rating server or both

Correct Answer: B,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

In which two ways does FortiManager function when it is deployed as a local FDS? (Choose two.)

A. It downloads license information for registered and unregistered devices

B. It functions as rating server only for web filtering and antispam services

C. It can be configured as an update server a rating server or both

D. It caches available firmware updates for both managed and unmanaged devices

Correct Answer: B,C

Question 6

Exhibit.

Refer to the exhibit, which contains a CLI script configuration on fortiManager. An administrator configured the CLI script on FortiManager rut the script tailed to apply any changes to the managed device after being executed.
What are two reasons why the script did not make any changes to the managed device? (Choose two)

A. The commands that start with the # sign did not run.

B. Incomplete commands can cause CLI scripts to fail.

C. Static routes can be added using only TCI scripts.

D. CLI scripts must start with #!.

Correct Answer: A,B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

What is true about the Fitter override option in the application control profile?

A. Helps to view the application control signatures for a specific category

B. Helps to configure actions for predefined categories

C. Helps to control specific signature and applications

D. Helps to categorize applications based on behavior risk or on technology

Correct Answer: D

Question 8

Refer to the exhibits, which show the configurations of two address objects from the same FortiGate.

Why can you modify the Engineering address object, but not the Finance address object?

A. FortiGate is registered on FortiManager.

B. FortiGate joined the Security Fabric and the Finance address object was configured on the root FortiGate.

C. Another user is editing the Finance address object in workspace mode.

D. You have read-only access.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

Exhibit.

Refer to the exhibit, which contains an ADVPN network diagram and a partial BGP con figuration Which two parameters Should you configure in config neighbor range? (Choose two.)

A. set neighbor-group advpn

B. set route reflector-client enable

C. set prefix 10.1.0 255.255.254.0

D. set prefix 172.16.1.0 255.255.255.0

Correct Answer: A,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Fortinet NSE 7 - Enterprise Firewall 7.2 (NSE7_EFW-7.2) Free Practice Test