Free Fortinet NSE7_EFW-7.2 Exam Questions

Become Fortinet Certified with updated NSE7_EFW-7.2 exam questions and correct answers

Page: 1 / 13

Total 64 Questions | Updated On: Feb 17, 2025

Add To Cart

Question 1

You want to block access to the website ww.eicar.orgusing a custom IPS signature. Which custom IPS signature should you configure?

A :

B :

C :

D :

Answer: D

Question 2

Refer to the exhibit, which shows an error in system fortiguard configuration.

What is the reason you cannot set the protocol to udp in config system fortiguard?

A : FortiManager provides FortiGuard.

B : fortiguard-anycast is set to enable.

C : You do not have the corresponding write access.

D : udp is not a protocol option.

Answer: D

Question 3

You want to configure faster failure detection for BGP Which parameter should you enable on both connected FortiGate devices?

A : Ebgp-enforce-multihop

B : bfd

C : Distribute-list-in

D : Graceful-restart

Answer: B

Question 4

An administrator has configured two fortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device What can the administrator do to fix this problem?

A : Verity Mai the speed and duplex settings match between me FortiGate interfaces and the connected switch ports

B : Configure set link -failed signal enable under-config systemha on both Cluster members

C : Configure remote Iink monitoring to detect an issue in theforwarding path

D : Configure setsend-garp-on-failover enablesunder configsystem ha on both clustermembers

Answer: B

Question 5

After enabling IPS you receive feedback about traffic being dropped. What could be thereason?

A : Np-accel-mode is set to enable

B : Traffic-submit is set to disable

C : IPS is configured to monitor

D : Fail-open is set to disable

Answer: D

Page: 1 / 13

Total 64 Questions | Updated On: Feb 17, 2025

Add To Cart