Fortinet NSE 7 - Network Security 7.2 Support Engineer (NSE7_NST-7.2) Free Practice Test

Question 1

Which statement is correct regarding LDAP authentication using the regular bind type?

A. The regular bind typerequires a FortiGate super_adminaccount.

B. The regular bind type is the easiest bind type to configure on FortiOS.

C. The regular bind type goes through four steps to successfully authenticate a user.

D. The regular bind type cannot be used if users are authenticated using sAMAccountName.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Refer to the exhibit.

FortiGate has already been configured with a firewall policy that allows all ICMP traffic to flow from port1 to port3.
Which changes must the administrator perform to ensure the server at 10.4.0.1/24 receives the echo reply from the laptop at 10.1.0.1/24?

A. Modify the default gateway on thelaptop from 10.1.0.2 to 10.2.0.2

B. Change the configuration from strict RPF check mode to feasible RPF check mode

C. A firewall policy that allows all ICMP traffic from port3 to port1.

D. Enable asymmetric routing under config system settings.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Refer to the exhibit, which shows the output of a BGP debug command.

Which statement explains why the state of the 10.200.3.1 peer is Connect?

A. The router 10.200.3.1 has authentication configured for BGP and the local router does not.

B. The local router is receiving BGP keepalives from the remote peer, but the local peer has not received the OpenConf inn yet.

C. The local router has a different AS number than the remote peer.

D. The local router initiated the BGP session to 10.200.3.1 but did not receive a response.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Refer to the exhibits, which show the configuration on FortiGate and partial session information for internet traffic from a user on the internal network.
If the priority on route ID _ were changed from 10 to 0, what would happen to traffic matching that user session?

A. The session would remain in the session table, and its traffic would egress from port2.

B. The session would remain in the session table, and itstraffic would egress from port1.

C. The session would remain in the session table, but its trafficwould now egress from both port1.andport2.

D. The session would be deleted, and the client would need to start a new session.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Fortinet NSE 7 - Network Security 7.2 Support Engineer (NSE7_NST-7.2) Free Practice Test