Fortinet NSE7_NST-7.2 Practice Test - Questions Answers, Page 2
List of questions
Question 11
Refer to the exhibits, which show the configuration on FortiGate and partial session information for internet traffic from a user on the internal network.
If the priority on route ID _ were changed from 10 to 0, what would happen to traffic matching that user session?
Question 12
Refer to the exhibit, which shows oneway communication of the downstream FortiGate with the upstream FortiGate within a Security Fabric.
What three actions must you take to ensure successful communication? (Choose three.)
Question 13
Refer to the exhibit, which shows the output of a BGP debug command.
Which statement explains why the state of the 10.200.3.1 peer is Connect?
Question 14
Refer to the exhibit, which shows two entries that were generated in the FSSO collector agent logs.
What three conclusions can you draw from these log entries? (Choose three.)
Question 15
Refer to the exhibit, which shows the output of a real-time debug.
Which statement about this output is true?
Question 16
Exhibit.
Refer to the exhibit, which shows the output of get router info bgp neighbors 100.64.2.254.
What can you conclude from the output?
Question 17
Which three common FortiGate-to-collector-agent connectivity issues can you identify using the FSSO real-time debug? (Choose three.)
Question 18
Refer to the exhibit.
Refer to the exhibit, which shows a partial output of the fssod daemon real-time debug command
What two conclusions can you draw from the output? (Choose two.)
Question 19
Consider the scenario where the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate. Which action will FortiGate take when using the default settings for SSL certificate inspection?
Question 20
Exhibit.
Refer to the exhibit, which contains the partial output of the get vpn ipsec tunnel details command. Based on the output, which two statements are correct? (Choose two.)
Question