Free Fortinet NSE7_EFW-7.2 Test Practice Test Questions Exam Dumps [Q27-Q44] – IT Certification Exam Questions & Answers

5/5 - (1 vote)

Free Fortinet NSE7_EFW-7.2 Test Practice Test Questions Exam Dumps

Prepare Top Fortinet NSE7_EFW-7.2 Exam Audio Study Guide Practice Questions Edition

QUESTION 27
Exhibit.

Refer to the exhibit, which contains the partial interface configuration of two FortiGate devices.
Which two conclusions can you draw from this con figuration? (Choose two)

10.1.5.254 is the default gateway of the internal network

On failover new primary device uses the same MAC address as the old primary

The VRRP domain uses the physical MAC address of the primary FortiGate

By default FortiGate B is the primary virtual router

QUESTION 28
Exhibit.

Refer to the exhibit which provides information on BGP neighbors
What can you conclude from this command output?

The local FortiGate has initiated a TCP connection, but there is no response from its BGP peer

The local FortiGate starts sending its routing table with its iBGP peer

The local FortiGate is having a fully established and active BGP connection with its peer

The local FortiGate is missing the config neighbor command in its BGP configuration

QUESTION 29
Which configuration can be used to reduce the number of BGP sessions in on IBGP network?

Route-reflector-peer enable

Route-reflector-client enable

Route-reflector enable

Route-reflector-server enable

QUESTION 30
Refer to the exhibit, which shows a partial touting table.

What two concisions can you draw from the corresponding FortiGate configuration? (Choose two.)

IPSec Tunnel aggregation is configured

net-device is enabled in the tunnel IPSec phase 1 configuration

OSPI is configured to run over IPSec.

add-route is disabled in the tunnel IPSec phase 1 configuration.

QUESTION 31
An administrator must improve the resiliency of a link by minimizing data loss within the enterprise network that has full path redundancy.
What should the administrator enable on the FortiGate devices that use BGP as dynamic routing protocol between two separate autonomous systems? (Choose two.)

graceful-restart

ibgp-multipath

bfd

route-reflector-client

QUESTION 32
Refer to the exhibit, which contains partial output from an IKE real-time debug.

Why did the tunnel not come up?

The local gateway has configured less secure encryption and hashing algorithms compared to the remote gateway.

The Diffie-Hellman group does not match on the local and remote gateways.

The proposal ID does not match between local and remote gateways.

The encapsulation method for phase 2 is set to none on local and remote gateways.

QUESTION 33
Exhibit.

Refer to the exhibit, which shows information about an OSPF interlace
What two conclusions can you draw from this command output? (Choose two.)

The port3 network has more man one OSPF router

The OSPF routers are in the area ID of 0.0.0.1.

The interfaces of the OSPF routers match the MTU value that is configured as 1500.

NGFW-1 is the designated router

QUESTION 34
Which ADVPN configuration must be configured using a script on fortiManager, when using VPN Manager to manage fortiGate VPN tunnels?

Enable AD-VPN in IPsec phase 1

Disable add-route on hub

Configure IP addresses on IPsec virtual interlaces

Set protected network to all

QUESTION 35
Refer to the exhibit, which shows a routing table.

What two options can you configure in OSPF to block the advertisement of the 10.1.10.0 prefix? (Choose two.)

Remove the 16.1.10.C prefix from the OSPF network

Configure a distribute-list-out

Configure a route-map out

Disable Redistribute Connected

QUESTION 36
Which two statements about IKE version 2 fragmentation are true? (Choose two.)

Only some IKE version 2 packets are considered fragmentable

The reassembly timeout default value is 30 seconds

It is performed at the IP layer

The maximum number of IKE version 2 fragments is 128

QUESTION 37
Which, three conditions are required for two FortiGate devices to form an OSPF adjacency? (Choose three.)

OSPF interface network types match

OSPF router IDs are unique

OSPF interface priority settings are unique

OSPF link costs match

Authentication settings match

QUESTION 38
Exhibit.

Refer to exhibit, which shows a central management configuration
Which server will FortiGate choose for web filler rating requests if 10.0.1.240 is experiencing an outage?

Public FortiGuard servers

10.0.1.242

10.0.1.244

10.0.1.243

QUESTION 39
Which two statements about ADVPN are true? (Choose two.)

The hub adds routes based on IKE negotiations.

You must configure phase 2 quick mode selectors to 0.0.0.0 0.0.0.0.

All FortiGate devices must be in the same autonomous system (AS).

You must disable add-route in the hub.

QUESTION 40
Which configuration can be used to reduce the number of BGP sessions in on IBGP network?

Route-reflector-peer enable

Route-reflector-client enable

Route-reflector enable

Route-reflector-server enable

QUESTION 41
Exhibit.

Refer to the exhibit, which shows the output from the webfilter fortiguard cache dump and webfilter categories commands.
Using the output, how can an administrator determine the category of the training.fortinet.comam website?

The administrator must convert the first three digits of the IP hex value to binary

The administrator can look up the hex value of 34 in the second command output.

The administrator must add both the Pima in and Iphex values of 34 to get the category number

The administrator must convert the first two digits of the Domain hex value to a decimal value

QUESTION 42
Refer to the exhibit, which shows device registration on FortiManager.

What can you conclude about the Spoke-1 and Spoke-2 configurations with respect to the information cond: Modified (recent auto-updated)?

Based on the policy configuration on NGFW-1, the configuration on both spokes is modified and automatically updated.

On NGFW-A, the configuration was changed and spokes are wailing for an autoupdate.

On both Spoke-1 and Spoke-2, the configuration was changed directly on the FortiGate device, and the changes were automatically retrieved by the device database.

Spoke-1 and Spoke-2 are sharing the same security policy configuration and the same policy package.

QUESTION 43
Refer to the exhibit, which shows an ADVPN network,

An administrator must configure an ADVPN using IBGP and EBGP to connect overlay network 1 with 2.
What must the administrator configure in the phase 1 VPN IPSEC configuration of the Hub2¢ub tunnels?

set auto-discovery-sender enable

set auto-discovery-forwarder enable

set add-route enable

set auto-discovery-receiver enable

QUESTION 44
Exhibit.

Refer to the exhibit, which contains an active-active toad balancing scenario.
During the traffic flow the primary FortiGate forwards the SYN packet to the secondary FortiGate.
What is the destination MAC address or addresses when packets are forwarded from the primary FortiGate to the secondary FortiGate?