Fortinet NSE7 – Enterprise Firewall 6.2 ( 2020 )

Welcome To The Fortinet NSE 7 – Enterprise Firewall 6.2 Practice Tests, The Final Exam preparation From I-Certified :

Note 1 : Students who bought our Practice Exam of the old version of NSE6 (6.0) and they still didn’t go for the exam, please send us a message and we will provide this Course free 🙂

Note 2 : All our practice exams are based on our team members after preparing and successfully passing the exam and it’s periodically updated based on our team members

Course not found.

Note 3 : Explanations are alawys there for tricky Questions and u can feel free to ask our team

Fortinet NSE7 Practice tests

Test 1 : Fortinet NSE 7 – Enterprise Firewall 6.215 questions
Test 2 : Fortinet NSE 7 – Enterprise Firewall 6.215 questions
Test 3 : Fortinet NSE 7 – Enterprise Firewall 6.215 questions
Test 4 : Fortinet NSE 7 – Enterprise Firewall 6.24 questions

Exam details Fortinet NSE7

Exam Title: Fortinet NSE 7 – Enterprise Firewall 6.2
Exam Code: NSE7_EFW-6.2
Number of Questions: 30 Questions
Duration: 60 min.
Availability: Pearson VUE Testing Center
Test Format: Multiple choice
Passing Score: Variable (70% Approx.)
Language Exam: English and Japanese
Product version: FortiOS 6.2
Fortinet NSE7

Course not found.

Fortinet NSE7 practice question and answers

Question 1.

Which of the following statements are true regarding the SIP session helper and the SIP application layer gateway (ALG)? (Choose three.)

A. SIP session helper runs in the kernel; SIP ALG runs as a user space process.
B. SIP ALG supports SIP HA failover; SIP helper does not.
C. SIP ALG supports SIP over IPv6; SIP helper does not.
D. SIP ALG can create expected sessions for media traffic; SIP helper does not.
E. SIP helper supports SIP over TCP and UDP; SIP ALG supports only SIP over UDP.

Answer 1. B, C, D

Question 2.

A FortiGate device has the following LDAP configuration:

The administrator executed the “˜dsquery’ command in the Windows LDAp server 10.0.1.10, and got the following output:
>dsquery user “”samid administrator
“CN=Administrator, CN=Users, DC=trainingAD, DC=training, DC=lab”
Based on the output, what FortiGate LDAP setting is configured incorrectly?

A. cnid.
B. username.
C. password.
D. dn.

Answer 2. B

Fortinet NSE7

Question 3.

Which of the following statements is true regarding a FortiGate configured as an explicit web proxy?

A. FortiGate limits the number of simultaneous sessions per explicit web proxy user. This limit CANNOT be modified by the administrator.
B. FortiGate limits the total number of simultaneous explicit web proxy users.
C. FortiGate limits the number of simultaneous sessions per explicit web proxy user. The limit CAN be modified by the administrator.
D. FortiGate limits the number of workstations that authenticate using the same web proxy user credentials. This limit CANNOT be modified by the administrator.

Answer 3. C

Question 4.

A corporate network allows Internet Access to FSSO users only. The FSSO user student does not have Internet access after successfully logged into the
Windows AD network. The output of the “˜diagnose debug authd fsso list’ command does not show student as an active FSSO user. Other FSSO users can access the Internet without problems. What should the administrator check? (Choose two.)

A. The user student must not be listed in the CA’s ignore user list.
B. The user student must belong to one or more of the monitored user groups.
C. The student workstation’s IP subnet must be listed in the CA’s trusted list.
D. At least one of the student’s user groups must be allowed by a FortiGate firewall policy.

Answer 4. A,B

Question 5.

An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage. However, after the changes, one network application started to have problems. During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before the arrival of the SYN/ACKs. When the SYN/ACK packets arrive to the FortiGate, the unit has already deleted the respective sessions. Which TCP session timer must be increased to fix this problem?

A. TCP half open.
B. TCP half close.
C. TCP time wait.
D. TCP session time to live.

Answer 5. A

Course not found.

Question 6.

An administrator is running the following sniffer in a FortiGate: diagnose sniffer packet any “host 10.0.2.10” 2
What information is included in the output of the sniffer? (Choose two.)

A. Ethernet headers.
B. IP payload.
C. IP headers.
D. Port names.

Answer 6. B, C

Question 7.

Which real time debug should an administrator enable to troubleshoot RADIUS authentication problems?

A. Diagnose debug application radius -1.
B. Diagnose debug application fnbamd -1.
C. Diagnose authd console “”log enable.
D. Diagnose radius console “”log enable.

Answer 7. A

Question 8.

An administrator has configured a FortiGate device with two VDOMs: root and internal. The administrator has also created and inter-VDOM link that connects both
VDOMs. The objective is to have each VDOM advertise some routes to the other VDOM via OSPF through the inter-VDOM link. What OSPF configuration settings must match in both VDOMs to have the OSPF adjacency successfully forming? (Choose three.)

A. Router ID.
B. OSPF interface area.
C. OSPF interface cost.
D. OSPF interface MTU.
E. Interface subnet mask.

Answer 8. B, D, E

Question 9.

An administrator has configured a dial-up IPsec VPN with one phase 2, extended authentication (XAuth) and IKE mode configuration. The administrator has also enabled the IKE real time debug: diagnose debug application ike-1 diagnose debug enable
In which order is each step and phase displayed in the debug output each time a new dial-up user is connecting to the VPN?

A. Phase1; IKE mode configuration; XAuth; phase 2.
B. Phase1; XAuth; IKE mode configuration; phase2.
C. Phase1; XAuth; phase 2; IKE mode configuration.
D. Phase1; IKE mode configuration; phase 2; XAuth.

Answer 9. B

Question 10.

Two independent FortiGate HA clusters are connected to the same broadcast domain. The administrator has reported that both clusters are using the same HA virtual MAC address. This creates a duplicated MAC address problem in the network. What HA setting must be changed in one of the HA clusters to fix the problem?