NSE7_EFW-7.0 Fortinet Exam Questions and Free Practice Test

Question 7

What is the purpose of an internal segmentation firewall (ISFW)?

A. It inspects incoming traffic to protect services in the corporate DMZ.

B. It is the first line of defense at the network perimeter.

C. It splits the network into multiple security segments to minimize the impact of breaches.

D. It is an all-in-one security appliance that is placed at remote sites to extend the enterprise network.

Correct Answer:C
ISFW splits your network into multiple security segments. They serve as a breach containers from attacks that come from inside.

Question 8

The logs in a FSSO collector agent (CA) are showing the following error: failed to connect to registry: PIKA1026 (192.168.12.232)
What can be the reason for this error?

A. The CA cannot resolve the name of the workstation.

B. The FortiGate cannot resolve the name of the workstation.

C. The remote registry service is not running in the workstation 192.168.12.232.

D. The CA cannot reach the FortiGate with the IP address 192.168.12.232.

Correct Answer:C
https://kb.fortinet.com/kb/documentLink.do?externalID=FD30548

Question 9

Which two tasks are automated using the Install Wizard on FortiManager? (Choose two.)

A. Installing configuration changes to managed devices

B. Importing interface mappings from managed devices

C. Adding devices to FortiManager

D. Previewing pending configuration changes for managed devices

Correct Answer:AD

Question 10

Which of the following conditions must be met for a static route to be active in the routing table? (Choose three.)

A. The next-hop IP address is up.

B. There is no other route, to the same destination, with a higher distance.

C. The link health monitor (if configured) is up.

D. The next-hop IP address belongs to one of the outgoing interface subnets.

E. The outgoing interface is up.

Correct Answer:CDE
A configured static route only goes to routing table from routing database when all the following are met :
NSE7_EFW-7.0 dumps exhibit The outgoing interface is up
There is no other matching route with a lower distance
The link health monitor (if configured) is successful
The next-hop IP address belongs to one of the outgoing interface subnets

Question 11

Examine the following traffic log; then answer the question below.
date-20xx-02-01 time=19:52:01 devname=master device_id="xxxxxxx" log_id=0100020007 type=event subtype=system pri critical vd=root service=kemel status=failure msg="NAT port is exhausted."
What does the log mean?

A. There is not enough available memory in the system to create a new entry in the NAT port table.

B. The limit for the maximum number of simultaneous sessions sharing the same NAT port has been reached.

C. FortiGate does not have any available NAT port for a new connection.

D. The limit for the maximum number of entries in the NAT port table has been reached.

Correct Answer:B

Question 12

Refer to the exhibit, which contains the output of a BGP debug command.
NSE7_EFW-7.0 dumps exhibit
Which statement about the exhibit is true?

A. The local router has received a total of three BGP prefixes from all peers.

B. The local router has not established a TCP session with 100.64.3.1.

C. Since the counters were last reset, the 10.200.3.1 peer has never been down.

D. The local router BGP state is OpenConfirm with the 10.127.0.75 peer.

Correct Answer:B

START NSE7_EFW-7.0 EXAM