Fortinet NSE7_EFW-7.2 Practice Test - Questions Answers, Page 6
List of questions
Question 51

Refer to the exhibits, which contain the network topology and BGP configuration for a hub.
Exhibit A.
Exhibit B.
An administrator is trying to configure ADVPN with a hub and spoke VPN setup using iBGP. All the VPNs are up and connected to the hub. The hub is receiving route information from both spokes over iBGP; however the spokes are not receiving route information from each other.
What change must the administrator make to the hub BGP configuration so that the routes learned from one spoke are forwarded to the other spoke?
Question 52

How are bulk configuration changes made using FortiManager CLI scripts? (Choose two.)
Question 53

Which statement about the designated router (DR) and backup designated router (BDR) in an OSPF multi-access network is true?
Question 54

Refer to the exhibit, which shows an SSL certification inspection configuration.
Which action does FortiGate take if the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate?
Question 55

Refer to the exhibit, which contains a TCL script configuration on FortiManager.
An administrator has configured the TCL script on FortiManager, but the TCL script failed to apply any changes to the managed device after being run.
Why did the TCL script fail to make any changes to the managed device?
Question 56

What are two functions of automation stitches? (Choose two.)
Question 57

How would =c-ingress and fec-sgress IPsec configuration affect an IPsec tunnel?
Question 58

Refer to the exhibit, which shows a partial routing table.
What two conclusions can you draw from the FortiGate output shown in the exhibit? (Choose two.)
Question 59

Refer to the exhibit, which shows device registration on FortiManager.
What can you conclude about the Spoke-1 and Spoke-2 configurations with respect to the information cond: Modified (recent auto-updated)?
Question 60

Refer to the exhibit, which shows an OSPF network.
Which types of ink-state advertisements (LSA) will NGFW-1 send, if itis a backup designated router (BDR)?
Question