Free Fortinet NSE7_EFW-7.2 Exam Questions

Become Fortinet Certified with updated NSE7_EFW-7.2 exam questions and correct answers

Page: 1 / 13

Total 64 Questions | Updated On: Mar 25, 2025

Add To Cart

Question 1

After enabling IPS you receive feedback about traffic being dropped. What could be thereason?

A : Np-accel-mode is set to enable

B : Traffic-submit is set to disable

C : IPS is configured to monitor

D : Fail-open is set to disable

Answer: D

Question 2

Refer to the exhibit, which shows an error in system fortiguard configuration.

What is the reason you cannot set the protocol to udp in config system fortiguard?

A : FortiManager provides FortiGuard.

B : fortiguard-anycast is set to enable.

C : You do not have the corresponding write access.

D : udp is not a protocol option.

Answer: D

Question 3

You want to improve reliability over a lossy IPSec tunnel. Which combination of IPSec phase 1 parameters should you configure?

A : fec-ingress and fec-egress

B : Odpd and dpd-retryinterval

C : fragmentation and fragmentation-mtu

D : keepalive and keylive

Answer: A

Question 4

You want to block access to the website ww.eicar.orgusing a custom IPS signature. Which custom IPS signature should you configure?

A :

B :

C :

D :

Answer: D

Question 5

Refer to the exhibit, which shows a custom signature.

Which two modifications must you apply to the configuration of this custom signature so that you can save it on FortiGate? (Choose two.)

A : Add severity.

B : Add attack_id.

C : Ensure that the header syntax is F-SBID.

D : Start options with --.

Answer: A,B

Page: 1 / 13

Total 64 Questions | Updated On: Mar 25, 2025

Add To Cart