Fortinet NSE7_EFW-7.2 - Fortinet NSE 7 - Enterprise Firewall 7.2 Exam

Question #6 (Topic: Exam A)
Which two statements about the neighbor-group command are true? (Choose two.)
A. It applies common settings in an OSPF area B. You can apply it in Internal BGP (IBGP) and External BGP (EBGP) C. You can configure it on the GUI D. It is combined with the neighbor-range parameter
Answer: BC
Question #7 (Topic: Exam A)
Refer to the exhibit, which contains information about an IPsec VPN tunnel.

What two conclusions can you draw from the command output? (Choose two.)
A. Dead peer detection is set to enable B. The IKE version is 2 C. Both IPsec SAs are loaded on the kernel D. Forward error correction in phase 2 is set to enable
Answer: BC
Question #8 (Topic: Exam A)
Which two statements about IKE version 2 fragmentation are true? (Choose two.)
A. Only some IKE version 2 packets are considered fragmentable B. The reassembly timeout default value is 30 seconds C. It is performed at the IP layer D. The maximum number of IKE version 2 fragments is 128
Answer: AC
Question #9 (Topic: Exam A)
An administrator has configured two FortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device.
What can the administrator do to fix this problem?
A. Configure set link-failed-signal enable under config system ha on both cluster members B. Configure set send-garp-on-failover enable under config system ha on both cluster members. C. Configure remote link monitoring to detect an issue in the forwarding path. D. Verify that the speed and duplex settings match between the FortiGate interfaces and the connected switch ports.
Answer: A
Question #10 (Topic: Exam A)
Refer to the exhibit, which shows the output of a BGP summary.

What two conclusions can you draw from this BGP summary? (Choose two.)
A. The BGP session with peer 10.127.0.75 is established. B. External BGP (EBGP) exchanges routing information. C. The router 100.64.3.1 has the parameter bfd set to enable. D. The neighbors displayed are linked to a local router with the neighbor-range set to a value of 4.
Answer: AB
Download Exam
Page: 2 / 18
Total 88 questions