NSE7_EFW-7.0 Free Practice Test

An administrator has configured a FortiGate device with two VDOMs: root and internal. The administrator has also created and inter-VDOM link that connects both VDOMs. The objective is to have each VDOM advertise some routes to the other VDOM via OSPF through the inter-VDOM link. What OSPF configuration settings must match in both VDOMs to have the OSPF adjacency successfully forming? (Choose three.)

1. A. Router ID.
2. B. OSPF interface area.
3. C. OSPF interface cost.
4. D. OSPF interface MTU.
5. E. Interface subnet mask.

Correct Answer: BDE

Which the following events can trigger the election of a new primary unit in a HA cluster? (Choose two.)

1. A. Primary unit stops sending HA heartbeat keepalives.
2. B. The FortiGuard license for the primary unit is updated.
3. C. One of the monitored interfaces in the primary unit is disconnected.
4. D. A secondary unit is removed from the HA cluster.

Correct Answer: AC

Examine the following routing table and BGP configuration; then answer the question below.

TheBGP connection is up, but the local peer is NOT advertising the prefix 192.168.1.0/24. Which configuration change will make the local peer advertise this prefix?

1. A. Enable the redistribution of connected routers into BGP.
2. B. Enable the redistribution of static routers into BGP.
3. C. Disable the setting network-import-check.
4. D. Enable the setting ebgp-multipath.

Correct Answer: C

A corporate network allows Internet Access to FSSO users only. The FSSO user student does not have Internet access after successfully logged into the Windows AD network. The output of the ‘diagnose debug authd fsso list’ command does not show student as an active FSSO user. Other FSSO users can access the Internet without problems. What should the administrator check? (Choose two.)

1. A. The user student must not be listed in the CA’s ignore user list.
2. B. The user student must belong to one or more of the monitored user groups.
3. C. The student workstation’s IP subnet must be listed in the CA’s trusted list.
4. D. At least one of the student’s user groups must be allowed by a FortiGate firewall policy.

Correct Answer: AD
https://kb.fortinet.com/kb/documentLink.do?externalID=FD38828

A FortiGate is configured as an explicit web proxy. Clients using this web proxy are reposting DNS errors when accessing any website. The administrator executes the following debug commands and observes that the n-dns-timeout counter is increasing:

What should the administrator check to fix the problem?

1. A. The connectivity between the FortiGate unit and the DNS server.
2. B. The connectivity between the client workstations and the DNS server.
3. C. That DNS traffic from client workstations is allowed by the explicit web proxy policies.
4. D. That DNS service is enabled in the explicit web proxy interface.

Correct Answer: A