Home / Fortinet / NSE7_EFW-7.2

Fortinet NSE7_EFW-7.2 Practice Test - Questions Answers, Page 6

Question list

List of questions

Question 51

(0)

Refer to the exhibits, which contain the network topology and BGP configuration for a hub. Exhibit A. Exhibit B. An administrator is trying to configure ADVPN with a hub and spoke VPN setup u

Question 52

(0)

How are bulk configuration changes made using FortiManager CLI scripts? (Choose two.)

Question 53

(0)

Which statement about the designated router (DR) and backup designated router (BDR) in an OSPF multi-access network is true?

Question 54

(0)

Refer to the exhibit, which shows an SSL certification inspection configuration. Which action does FortiGate take if the server name indication (SNI) does not match either the common name (CN) or

Question 55

(0)

Refer to the exhibit, which contains a TCL script configuration on FortiManager. An administrator has configured the TCL script on FortiManager, but the TCL script failed to apply any changes to

Question 56

(0)

What are two functions of automation stitches? (Choose two.)

Related questions

Refer to the exhibit, which shows two configured FortiGate devices and peering over FGSP. The main link directly connects the two FortiGate devices and is configured using the set session-syn-dev <interface> command. What is the primary reason to configure the main link?

Exhibit. Refer to the exhibit, which contains a partial policy configuration. Which setting must you configure to allow SSH?

Which, three conditions are required for two FortiGate devices to form an OSPF adjacency? (Choose three.)

Which FortiGate in a Security I auric sends togs to FortiAnalyzer?

Exhibit. Refer to the exhibit, which shows information about an OSPF interlace What two conclusions can you draw from this command output? (Choose two.)

Which two statements about metadata variables are true? (Choose two.)

Which two statements about IKE vision 2 are true? (Choose two.)

Refer to the exhibits, which contain the network topology and BGP configuration for a hub. Exhibit A. Exhibit B. An administrator is trying to configure ADVPN with a hub and spoke VPN setup using iBGP. All the VPNs are up and connected to the hub. The hub is receiving route information from both spokes over iBGP; however the spokes are not receiving route information from each other. What change must the administrator make to the hub BGP configuration so that the routes learned from one spoke are forwarded to the other spoke?

Refer to the exhibit. which contains a partial configuration of the global system. What can you conclude from this output?

Refer to the exhibit, which shows a network diagram. Which IPsec phase 2 configuration should you impalement so that only one remote site is connected at any time?

Question 51

Refer to the exhibits, which contain the network topology and BGP configuration for a hub.

Exhibit A.

Exhibit B.

An administrator is trying to configure ADVPN with a hub and spoke VPN setup using iBGP. All the VPNs are up and connected to the hub. The hub is receiving route information from both spokes over iBGP; however the spokes are not receiving route information from each other.

What change must the administrator make to the hub BGP configuration so that the routes learned from one spoke are forwarded to the other spoke?

Configure the hub as a route reflector

Configure auto-discovery-sender on the hub

Add a prefix list to the hub that permits routes to be shared between the spokes

Enable route redistribution under config router bgp

Show Answer Comment (0)

Question 52

How are bulk configuration changes made using FortiManager CLI scripts? (Choose two.)

When run on the Device Database, changes are applied directly to the managed FortiGate device.

When run on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.

When run on the All FortiGate in ADOM, changes are automatically installed without the creation of a new revision history.

When run on the Policy Package, ADOM database, you must use the installation wizard to apply the changes to the managed FortiGate device.

Show Answer Comment (0)

Question 53

Which statement about the designated router (DR) and backup designated router (BDR) in an OSPF multi-access network is true?

Only the DR receives link state information from non-DR routers.

Non-DR and non-BDR routers form full adjacencies to DR only.

FortiGate first checks the OSPF ID to elect a DR.

Non-DR and non-BDR routers send link state updates and acknowledgements to 224.0.0.6.

Show Answer Comment (0)

Question 54

Refer to the exhibit, which shows an SSL certification inspection configuration.

Which action does FortiGate take if the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate?

FortiGate uses the first entry listed in the SAN field in the server certificate

FortiGate uses the CN information from the Subject field in the server certificate

FortiGate uses the SNI from the user's web browser.

FortiGate closes the connection because this represents an invalid SSL/TLS configuration

Show Answer Comment (0)

Question 55

Refer to the exhibit, which contains a TCL script configuration on FortiManager.

An administrator has configured the TCL script on FortiManager, but the TCL script failed to apply any changes to the managed device after being run.

Why did the TCL script fail to make any changes to the managed device?

The TCL procedure run_cmd has not been created.

The TCL script must start with #include.

There is no corresponding #! to signify the end of the script.

The TCL procedure lacks the required loop statements to iterate through the changes.

Show Answer Comment (0)

Question 56

What are two functions of automation stitches? (Choose two.)

Automation stitches can be created to run diagnostic commands and email the results when CPU or memory usage exceeds specified thresholds.

An automation stitch configured to execute actions in parallel can be set to insert a specific delay between actions.

Automation stitches can be configured on any FortiGate device in a Security Fabric environment.

An automation stitch configured to execute actions sequentially can take parameters from previous actions as input for the current action.

Show Answer Comment (0)

Total 56 questions

1 2 3 4 5 6

Go to page: of 6