NSE7_EFW-7.0 Fortinet Exam Questions and Free Practice Test

Question 13

Which the following events can trigger the election of a new primary unit in a HA cluster? (Choose two.)

A. Primary unit stops sending HA heartbeat keepalives.

B. The FortiGuard license for the primary unit is updated.

C. One of the monitored interfaces in the primary unit is disconnected.

D. A secondary unit is removed from the HA cluster.

Correct Answer:AC

Question 14

Refer to the exhibit, which contains the output of diagnose sys session list.
NSE7_EFW-7.0 dumps exhibit
If the HA ID for the primary unit is zero (0), which statement about the output is true?

A. This session cannot be synced with the slave unit.

B. The inspection of this session has been offloaded to the slave unit.

C. The master unit is processing this traffic.

D. This session is for HA heartbeat traffic.

Correct Answer:C

Question 15

View the exhibit, which contains the output of a debug command, and then answer the question below.
NSE7_EFW-7.0 dumps exhibit
Which of the following statements about the exhibit are true? (Choose two.)

A. In the network on port4, two OSPF routers are down.

B. Port4 is connected to the OSPF backbone area.

C. The local FortiGate’s OSPF router ID is 0.0.0.4

D. The local FortiGate has been elected as the OSPF backup designated router.

Correct Answer:BC

Question 16

View these partial outputs from two routing debug commands:
NSE7_EFW-7.0 dumps exhibit
Which outbound interface will FortiGate use to route web traffic from internal users to the Internet?

A. Both port1 and port2

B. port3

C. port1

D. port2

Correct Answer:C

Question 17

View the exhibit, which contains the output of a diagnose command, and then answer the question below.
NSE7_EFW-7.0 dumps exhibit
Which statements are true regarding the output in the exhibit? (Choose two.)

A. FortiGate will probe 121.111.236.179 every fifteen minutes for a response.

B. Servers with the D flag are considered to be down.

C. Servers with a negative TZ value are experiencing a service outage.

D. FortiGate used 209.222.147.3 as the initial server to validate its contract.

Correct Answer:AD
A – because flag is Failed so fortigate will check if server is available every 15 minD-state is I , contact to validate contract info

Question 18

Which two tasks are automated using the Install Wizard on FortiManager? (Choose two.)

A. Preview pending configuration changes for managed devices.

B. Add devices to FortiManager.

C. Import policy packages from managed devices.

D. Install configuration changes to managed devices.

E. Import interface mappings from managed devices.

Correct Answer:AD
https://help.fortinet.com/fmgr/50hlp/56/5-6-2/FortiManager_Admin_Guide/1000_Device Manager/1200_ins
There are 4 main wizards:Add Device: is used to add devices to central management and import their configurations.
Install: is used to install configuration changes from Device Manager or Policies & Objects to the managed devices. It allows you to preview the changes and, if the administrator doesn’t agree with the changes, cancel and modify them.
Import policy: is used to import interface mapping, policy database, and objects associated with the managed devices into a policy package under the Policy & Object tab. It runs with the Add Device wizard by default and may be run at any time from the managed device list.
Re-install policy: is used to perform a quick install of the policy package. It doesn’t give the ability to preview the changes that will be installed to the managed device.

START NSE7_EFW-7.0 EXAM