Fortinet NSE 7 - Enterprise Firewall 7.2 - NSE7_EFW-7.2 Free Exam Questions

A. Route-reflector enable

B. Route-reflector-server enable

C. Route-reflector-client enable

D. Route-reflector-peer enable

A. Only some IKE version 2 packets are considered fragmentable.

B. It is performed at the IP layer.

C. The reassembly timeout default value is 30 seconds.

D. The maximum number of IKE version 2 fragments is 128.

A. Configure set send-garp-on-failover enables under config system ha on both cluster members

B. Configure remote Iink monitoring to detect an issue in the forwarding path

C. Verify that the speed and duplex settings match between me FortiGate interfaces and the connected switch ports

D. Configure set link -failed signal enable under-config system ha on both Cluster members

A. The local FortiGate is having a fully established and active BGP connection with its peer

B. The local FortiGate is missing the config neighbor command in its BGP configuration

C. The local FortiGate starts sending its routing table with its iBGP peer

D. The local FortiGate has initiated a TCP connection, but there is no response from its BGP peer

A. When run on the Policy Package, ADOM database, you must use the installation wizard to apply the changes to the managed FortiGate device.

B. When run on the All FortiGate in ADOM, changes are automatically installed without the creation of a new revision history.

C. When run on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.

D. When run on the Device Database, changes are applied directly to the managed FortiGate device.

A. It supports the XAuth protocol.

B. It supports the extensible authentication protocol (EAP)

C. Phase 1 includes main mode

D. It exchanges a minimum of four messages to establish a secure tunnel

A. Set ike-version 2

B. Set auto-discovery-receiver enable

C. Set auto-discovery-sender enable

D. Set auto-discovery-forwarder enable

A. Fail-open is set to disable

B. Traffic-submit is set to disable

C. IPS is configured to monitor

D. Np-accel-mode is set to enable

A. By default FortiGate B is the primary virtual router

B. On failover new primary device uses the same MAC address as the old primary

C. 10.1.5.254 is the default gateway of the internal network

D. The VRRP domain uses the physical MAC address of the primary FortiGate