Online Access Free NSE7_EFW-7.2 Practice Test

Refer to the exhibit, which shows an SSL certification inspection configuration.

Which action does FortiGate take if the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate?

• A.FortiGate closes the connection because this represents an invalid SSL/TLS configuration
• B.FortiGate uses the first entry listed in the SAN field in the server certificate
• C.FortiGate uses the CN information from the Subject field in the server certificate
• D.FortiGate uses the SNI from the user's web browser.

Which two statements about IKE vision 2 are true? (Choose two.)

• A.Phase 1 includes main mode
• B.It supports the extensible authentication protocol (EAP)
• C.It supports the XAuth protocol.
• D.It exchanges a minimum of four messages to establish a secure tunnel

Exhibit.

Refer to the exhibit, which shows a partial touting table
What two concisions can you draw from the corresponding FortiGate configuration? (Choose two.)

• A.OSPI is configured to run over IPSec.
• B.add-route is disabled in the tunnel IPSec phase 1 configuration.
• C.IPSec Tunnel aggregation is configured
• D.net-device is enabled in the tunnel IPSec phase 1 configuration

Which, three conditions are required for two FortiGate devices to form an OSPF adjacency? (Choose three.)

• A.OSPF link costs match
• B.Authentication settings match
• C.OSPF interface priority settings are unique
• D.OSPF router IDs are unique
• E.OSPF interface network types match

Refer to the exhibit, which shows config system central-management information.

Which setting must you configure for the web filtering feature to function?

• A.Configure securewf.fortiguard. net on the default servers.
• B.Add server. fortiguard. net to the server list.
• C.Set update-server-location to automatic.
• D.Configure server-type with the rating option.