Free Fortinet NSE7_EFW-7.2 Exam Questions

Become Fortinet Certified with updated NSE7_EFW-7.2 exam questions and correct answers

Page: 1 / 16

Total 80 Questions | Updated On: Jan 02, 2024

Add To Cart

Question 1

You want to block access to the website ww.eicar.orgusing a custom IPS signature. Which custom IPS signature should you configure?

A :

B :

C :

D :

Answer: D

Question 2

You want to configure faster failure detection for BGP Which parameter should you enable on both connected FortiGate devices?

A : Ebgp-enforce-multihop

B : bfd

C : Distribute-list-in

D : Graceful-restart

Answer: B

Question 3

Exhibit.

Refer to the exhibit, which contains an active-active toad balancing scenario. During the traffic flow the primary FortiGate forwards the SYN packet to the secondary FortiGate. What is the destination MAC address or addresses when packets are forwarded from the primary FortiGate to the secondary FortiGate?

A : Secondary physical MAC port1

B : Secondary virtual MAC port1

C : Secondary virtual MAC port1 then physical MAC port1

D : Secondary physical MAC port2 then virtual MAC port2

Answer: B

Question 4

Which two statements about IKE vision 2 are true? (Choose two.)

A : Phase 1 includes main mode

B : It supports the extensible authentication protocol (EAP)

C : It supports the XAuth protocol.

D : It exchanges a minimum of four messages to establish a secure tunnel

Answer: B,D

Question 5

Which two statements about metadata variables are true? (Choose two.)

A : You create them on FortiGate

B : They apply only to non-firewall objects.

C : The metadata format is $.

D : They can be used as variables in scripts

Answer: B,D

Page: 1 / 16

Total 80 Questions | Updated On: Jan 02, 2024

Add To Cart