Fortinet NSE 7 - Enterprise Firewall 7.0 - NSE7_EFW-7.0 Exam Practice Test

A. All FortiGate devices in the Security Fabric must have bidirectional FortiTelemetry connectivity.

B. FortiGate uses FortiTelemetry protocol to communicate with FortiAnalyzer.

C. Only the root FortiGate collects network information and forwards it to FortiAnalyzer.

D. Branch FortiGate devices must be configured first.

A. It disabled all the non-heartbeat interfaces in all HA members for two seconds after a failover.

B. It sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.

C. It forces the former primary device to shut down all its non-heartbeat interfaces for one second, while the failover occurs.

D. It sends a link failed signal to all connected devices.

A. Master is selected because it is the only device in the cluster.

B. The slave configuration is not synchronized with the master.

C. port 7 is used the HA heartbeat on all devices in the cluster.

D. The HA management IP is 169.254.0.2.

A. It is an ICMP session from 10.1.10.10 to 10.200.1.1.

B. It is a TCP session in the established state, from 10.1.10.10 to 10.200.5.1.

C. It is an ICMP session from 10.1.10.10 to 10.200.5. 1.

D. It is a TCP session in close_wait state, from 10. l. 10.10 to 10.200.1.1.

A. It caches available firmware updates for unmanaged devices.

B. It can be configured as an update server, a rating server, or both.

C. It supports rating requests from non-FortiGate devices.

D. It provides VM license validation services.

A. Protocol options allows administrators to configure which Layer 4 port numbers map to upper-layer protocols, such as HTTP, SMTP, FTP, and so on.

B. Protocol options allows administrators the ability to configure the Any setting for all enabled protocols which provides the most efficient use of system resources.

C. Protocol options allows administrators a streamlined method to instruct FortiGate to block all sessions corresponding to disabled protocols.

D. Protocol options allow administrators to configure a maximum number of sessions for each configured protocol.

A. The session would remain in the session table, and its traffic would egress from port1.

B. The session would remain in the session table, but its traffic would now egress from both port1 and port2.

C. The session would be deleted, and the client would need to start a new session.

D. The session would remain in the session table, and its traffic would egress from port2.

A. diagnose sniffer packet any 'host 10.0.10.10'

B. diagnose sniffer packet any 'port 4500'

C. diagnose sniffer packet any 'ip proto 50'

D. diagnose sniffer packet any 'esp and host 10.200.3.2'

A. Only FortiGate devices with fabric-object-unification set to default will receive and synchronize global CMDB objects sent by the root FortiGate.

B. Only the root FortiGate collects network topology information and forwards it to FortiAnalyzer.

C. FortiGate uses FortiTelemetry protocol to communicate with FortiAnalyzer.

D. Only the root FortiGate sends logs to FortiAnalyzer.

A. It is currently in system conserve mode because of high memory usage.

B. It is currently in FD conserve mode.

C. It is currently in kernel conserve mode because of high memory usage.

D. It is currently in system conserve mode because of high CPU usage.

A. Import policy packages from managed devices.

B. Preview pending configuration changes for managed devices.

C. Add devices to FortiManager.

D. Install configuration changes to managed devices.

E. Import interface mappings from managed devices.

A. With the auxiliary session setting enabled, two sessions are created in case of routing change.

B. With the auxiliary session setting disabled, only auxiliary sessions are offloaded.

C. With the auxiliary session setting disabled, for each traffic path, FortiGate uses the same auxiliary session.

D. With the auxiliary session setting enabled, ECMP traffic is accelerated to the NP6 processor.