NSE7_EFW-7.0 Free Practice Test

Four FortiGate devices configured for OSPF connected to the same broadcast domain. The first unit is elected as the designated router The second unit is elected as the backup designated router Under normal operation, how many OSPF full adjacencies are formed to each of the other two units?

1. A. 1
2. B. 2
3. C. 3
4. D. 4

Correct Answer: B

View the exhibit, which contains a partial output of an IKE real-time debug, and then answer the question below.

Based on the debug output, which phase-1 setting is enabled in the configuration of this VPN?

1. A. auto-discovery-sender
2. B. auto-discovery-forwarder
3. C. auto-discovery-shortcut
4. D. auto-discovery-receiver

Correct Answer: B

The logs in a FSSO collector agent (CA) are showing the following error: failed to connect to registry: PIKA1026 (192.168.12.232)
What can be the reason for this error?

1. A. The CA cannot resolve the name of the workstation.
2. B. The FortiGate cannot resolve the name of the workstation.
3. C. The remote registry service is not running in the workstation 192.168.12.232.
4. D. The CA cannot reach the FortiGate with the IP address 192.168.12.232.

Correct Answer: C
https://kb.fortinet.com/kb/documentLink.do?externalID=FD30548

Which two statements about OCVPN are true? (Choose two.)

1. A. Only root vdom supports OCVPN.
2. B. OCVPN supports static and dynamic IPs in WAN interface.
3. C. OCVPN offers only Hub-Spoke VPNs.
4. D. FortiGate devices under different FortiCare accounts can be used to form OCVPN.

Correct Answer: AB

A FortiGate has two default routes:

All Internet traffic is currently using port1. The exhibit shows partial information for one sample session of Internet traffic from an internal user:

What would happen with the traffic matching the above session if the priority on the first default route (IDd1) were changed from 5 to 20?

1. A. The session would be deleted, and the client would need to start a new session.
2. B. The session would remain in the session table, and its traffic would start to egress from port2.
3. C. The session would remain in the session table, but its traffic would now egress from both port1 and port2.
4. D. The session would remain in the session table, and its traffic would still egress from port1.

Correct Answer: D