Practice NSE7_EFW-7.2 Exam Online

Question 1

Which two statements about metadata variables are true? (Choose two.)

A : You create them on FortiGate

B : They apply only to non-firewall objects.

C : The metadata format is $.

D : They can be used as variables in scripts

Answer: B,D

Question 2

An administrator has configured two fortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device What can the administrator do to fix this problem?

A :

Verity Mai the speed and duplex settings match between me FortiGate interfaces and the connected switch ports

B : Configure set link -failed signal enable under-config systemha on both Cluster members

C : Configure remote Iink monitoring to detect an issue in theforwarding path

D : Configure setsend-garp-on-failover enablesunder configsystem ha on both clustermembers

Answer: B

Question 3

You want to block access to the website ww.eicar.orgusing a custom IPS signature. Which custom IPS signature should you configure?

A :

B :

C :

D :

Answer: D

Question 4

Exhibit.

Refer to the exhibit,which contains an ADVPN network diagram and a partial BGP con figuration Which twoparameters Should you configure in config neighbor range? (Choose two.)

A : set prefix 172.16.1.0 255.255.255.0

B : set route reflector-client enable

C : set neighbor-group advpn

D : set prefix 10.1.0 255.255.255.0

Answer: C,D

Question 5

Refer to the exhibit, which shows a custom signature.

Which two modifications must you apply to the configuration of this custom signature so that you can save it on FortiGate? (Choose two.)

A : Add severity.

B : Add attack_id.

C : Ensure that the header syntax is F-SBID.

D : Start options with --.

Answer: A,B

Name:	Fortinet NSE 7 - Enterprise Firewall 7.2
Exam Code:	NSE7_EFW-7.2
Certification:	NSE 7 Network Security Architect
Vendor:	Fortinet
Total Questions:	50
Last Updated:	Apr 22, 2024

Fortinet NSE7_EFW-7.2