Sample Questions of NSE7_EFW-7.2 Dumps With 100% Exam Passing Guarantee [Q21-Q37]

5/5 - (4 votes)

Sample Questions of NSE7_EFW-7.2 Dumps With 100% Exam Passing Guarantee

Pass Key features of NSE7_EFW-7.2 Course with Updated 36 Questions

QUESTION 21
Exhibit.

Refer to the exhibit, which contains an ADVPN network diagram and a partial BGP con figuration Which two parameters Should you configure in config neighbor range? (Choose two.)

set prefix 172.16.1.0 255.255.255.0

set route reflector-client enable

set neighbor-group advpn

set prefix 10.1.0 255.255.255.0

QUESTION 22
Exhibit.

Refer to the exhibit, which shows a partial web filter profile conjuration What can you cone udo from this configuration about access to www.facebook, com, which is categorized as Social Networking?

The access is blocked based on the Content Filter configuration

The access is allowed based on the FortiGuard Category Based Filter configuration

The access is blocked based on the URL Filter configuration

The access is hocked if the local or the public FortiGuard server does not reply

QUESTION 23
Exhibit.

Refer to the exhibit, which contains an active-active toad balancing scenario.
During the traffic flow the primary FortiGate forwards the SYN packet to the secondary FortiGate.
What is the destination MAC address or addresses when packets are forwarded from the primary FortiGate to the secondary FortiGate?

Secondary physical MAC port1

Secondary virtual MAC port1

Secondary virtual MAC port1 then physical MAC port1

Secondary physical MAC port2 then virtual MAC port2

QUESTION 24
Refer to the exhibit, which shows a routing table.

What two options can you configure in OSPF to block the advertisement of the 10.1.10.0 prefix? (Choose two.)

Remove the 16.1.10.C prefix from the OSPF network

Configure a distribute-list-out

Configure a route-map out

Disable Redistribute Connected

QUESTION 25
Which two statements about the Security fabric are true? (Choose two.)

FortiGate uses the FortiTelemetry protocol to communicate with FortiAnatyzer.

Only the root FortiGate sends logs to FortiAnalyzer

Only FortiGate devices with configuration-sync receive and synchronize global CMDB objects that the toot FortiGate sends

Only the root FortiGate collects network topology information and forwards it to FortiAnalyzer

QUESTION 26
Which statement about network processor (NP) offloading is true?

For TCP traffic FortiGate CPU offloads the first packets of SYN/ACK and ACK of the three-way handshake to NP

The NP provides IPS signature matching

You can disable the NP for each firewall policy using the command np-acceleration st to loose.

The NP checks the session key or IPSec SA

QUESTION 27
After enabling IPS you receive feedback about traffic being dropped.
What could be the reason?

Fail-open is set to disable

Traffic-submit is set to disable

IPS is configured to monitor

Np-accel-mode is set to enable

QUESTION 28
Exhibit.

Refer to the exhibit, which contains a partial VPN configuration.
What can you conclude from this configuration1?

FortiGate creates separate virtual interfaces for each dial up client.

The VPN should use the dynamic routing protocol to exchange routing information Through the tunnels.

Dead peer detection s disabled.

The routing table shows a single IPSec virtual interface.

QUESTION 29
In which two ways does fortiManager function when it is deployed as a local FDS? (Choose two)

lt can be configured as an update server a rating server or both

It provides VM license validation services

It supports rating requests from non-FortiGate devices.

It caches available firmware updates for unmanaged devices

QUESTION 30
Exhibit.

Refer to the exhibit, which shows a partial touting table
What two concisions can you draw from the corresponding FortiGate configuration? (Choose two.)

IPSec Tunnel aggregation is configured

net-device is enabled in the tunnel IPSec phase 1 configuration

OSPI is configured to run over IPSec.

add-route is disabled in the tunnel IPSec phase 1 configuration.

QUESTION 31
Exhibit.

Refer to exhibit, which shows a central management configuration
Which server will FortiGate choose for web filler rating requests if 10.0.1.240 is experiencing an outage?

Public FortiGuard servers

10.0.1.242

10.0.1.244

10.0.1.243

QUESTION 32
Which ADVPN configuration must be configured using a script on fortiManager, when using VPN Manager to manage fortiGate VPN tunnels?

Enable AD-VPN in IPsec phase 1

Disable add-route on hub

Configure IP addresses on IPsec virtual interlaces

Set protected network to all

QUESTION 33
Exhibit.

Refer to the exhibit, which shows information about an OSPF interlace
What two conclusions can you draw from this command output? (Choose two.)