Fortinet NSE7_FSN_AR-7.6 - Fortinet NSE 7 - Secure Networking 7.6 Architect Exam
Page: 3 / 11
Total 55 questions
Question #11 (Topic: Exam A)
In which order does FortiGate consider the following elements during the route lookup process?
A. SD-WAN rules, policy routes, static routes, ISDB routes
B. Policy routes, ISDB routes, SD-WAN rules, static routes
C. Policy routes, SD-WAN rules, Internet Service Database (ISDB) routes, BGP routes
D. SD-WAN rules, ISDB routes, policy routes, BGP routes
Answer: C
Question #12 (Topic: Exam A)
While troubleshooting a FortiGate web filter issue, users report that they cannot access any websites, even though those sites are not explicitly blocked by any web filter profiles that are applied to firewall policies.
What are the three most likely reasons for this behavior? (Choose three.)
What are the three most likely reasons for this behavior? (Choose three.)
A. The SSL/TLS deep inspection was configured but the browsers do not have the FortiGate certificate installed.
B. The web filter cache has been cleared causing all websites to take longer to be rated.
C. The DNS server is unreachable, preventing URL resolution.
D. The webfilter-force-off setting has been enabled under config system fortiguard.
E. The FortiGuard Web Filtering license has expired, causing FortiGate to apply the default block action.
Answer: ACE
Question #13 (Topic: Exam A)
You manage an SD-WAN topology and you will soon deploy 50 new branches.
Which two tasks can you do in advance to simplify this deployment? (Choose two.)
Which two tasks can you do in advance to simplify this deployment? (Choose two.)
A. Create model devices.
B. Create a policy blueprint.
C. Define metadata variable values for each device.
D. Create a zero-touch provisioning (ZTP) template.
Answer: AC
Question #14 (Topic: Exam A)
You want to configure SD-WAN on a few FortiGate devices to optimize the use of WAN links and secure internet access. The devices are standalone FortiGate, already centrally managed by FortiManager.
Which statement applies?
Which statement applies?
A. You must move the devices to the SD-WAN Manager section before you can configure SD-WAN rules.
B. You can keep the devices in the Device Manager section, but you must place them in a dedicated device group.
C. You can keep the devices in the Device Manager section. You can configure per-device SD-WAN settings.
D. You must move the devices to the SD-WAN Manager section and use the SD-WAN standalone wizard.
Answer: C
Question #15 (Topic: Exam A)
Refer to the exhibit.
The VDOM configuration on a FortiGate device is shown.
You discover that web filtering stopped working in Core1 and Core2 after a maintenance window.
What are two reasons why web filtering stopped working? (Choose two.)
The VDOM configuration on a FortiGate device is shown.
You discover that web filtering stopped working in Core1 and Core2 after a maintenance window.
What are two reasons why web filtering stopped working? (Choose two.)
A. The Core1 and Core2 VDOMs must also be enabled as management VDOMs to receive FortiGuard updates.
B. The root VDOM does not have access to FortiManager in a closed network.
C. The root VDOM does not use a VDOM link to connect with the Core1 and Core2 VDOMs.
D. The root VDOM does not have access to any valid, public Fortinet Distribution Network (FDN).
Answer: BD
