Online Access Free NSE7_EFW-7.2 Practice Test

Exhibit.

Refer to the exhibit, which shows a partial touting table
What two concisions can you draw from the corresponding FortiGate configuration? (Choose two.)

• A.IPSec Tunnel aggregation is configured
• B.net-device is enabled in the tunnel IPSec phase 1 configuration
• C.add-route is disabled in the tunnel IPSec phase 1 configuration.
• D.OSPI is configured to run over IPSec.

Which two statements about IKE version 2 fragmentation are true? (Choose two.)

• A.It is performed at the IP layer.
• B.The reassembly timeout default value is 30 seconds.
• C.The maximum number of IKE version 2 fragments is 128.
• D.Only some IKE version 2 packets are considered fragmentable.

You want to block access to the website ww.eicar.org using a custom IPS signature.
Which custom IPS signature should you configure?

• A.
• B.
• C.
• D.

An administrator has configured two fortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device What can the administrator do to fix this problem?

• A.Configure set send-garp-on-failover enables under config system ha on both cluster members
• B.Verify that the speed and duplex settings match between me FortiGate interfaces and the connected switch ports
• C.Configure remote Iink monitoring to detect an issue in the forwarding path
• D.Configure set link -failed signal enable under-config system ha on both Cluster members

Which statement about ADVPN is true?

• A.It supports only on single hub-and spoke architecture
• B.It requires all the devices must be on the same AS for inter-region ADVPN topology
• C.lt is a combination of hub-and spoke and full-mesh topologies
• D.lt only uses BGP for dynamic routing