Fortinet NSE7_NST-7.2 - Fortinet NSE 7 - Network Security 7.2 Support Engineer Exam
Page: 3 / 15
Total 71 questions
Question #11 (Topic: Exam A)
Refer to the exhibit, which shows the output of get router info ospf neighbor.
What can you conclude from the command output?
What can you conclude from the command output?
A. The local FortiGate is not a DROther.
B. All neighbors are in area 0.0.0.0.
C. The local FortiGate is the BDR.
D. The network type connecting the local Fortigate and OSPF neighbor 0.0.0.10 is point-to-point.
Answer: D
Question #12 (Topic: Exam A)
Refer to the exhibit, which contains partial output from an IKE real-time debug.
The administrator does not have access to the remote gateway.
Based on the debug output, which configuration change can the administrator make to the local gateway to resolve the phase 1 negotiation error?
The administrator does not have access to the remote gateway.
Based on the debug output, which configuration change can the administrator make to the local gateway to resolve the phase 1 negotiation error?
A. In the phase 1 proposal configuration, add AESCBC-SHA2 to the list of encryption algorithms.
B. In the phase 1 proposal configuration, add AES256-SHA256 to the list of encryption algorithms.
C. In the phase 1 proposal configuration, add AES128-SHA128 to the list of encryption algorithms.
D. In the phase 1 network configuration, set the IKE version to 2.
Answer: B
Question #13 (Topic: Exam A)
What are two functions of automation stitches? (Choose two.)
A. You can configure automation stitches on any FortiGate device in a Security Fabric environment.
B. You can create automation stitches to run diagnostic commands and attach the results to an email message when CPU or memory usage exceeds specified thresholds.
C. An automation stitch configured to execute actions sequentially can take parameters from previous actions as input for the current action.
D. You can set an automation stitch configured to execute actions in parallel to insert a specific delay between actions.
Answer: BC
Question #14 (Topic: Exam A)
Refer to the exhibit, which shows partial outputs from two routing debug commands.
Why is the port2 default route not in the second command output?
Why is the port2 default route not in the second command output?
A. The port2 interface is disabled in the FortiGate configuration.
B. The port1 default route has a higher priority value than the default route using port2.
C. The port1 default route has a lower priority value than the default route using port2.
D. The port1 default route has a lower distance than the default route using port2.
Answer: D
Question #15 (Topic: Exam A)
Refer to the exhibit, which shows the output of diagnose sys session stat.
Which statement about the output shown in the exhibit is correct?
Which statement about the output shown in the exhibit is correct?
A. All the sessions in the session table are TCP sessions.
B. 162 sessions have been deleted because of memory page exhaustion.
C. There are 166 TCP sessions waiting to complete the three-way handshake.
D. There are two sessions that have not been removed in case of any out-of- order packets that arrive.
Answer: D
