NSE7_EFW-7.2 Exam - Free Actual Q&As, Page 1

NSE7_EFW-7.2 Actual Exam Questions

Last updated on Dec. 10, 2024.

Vendor:Fortinet

Exam Code:NSE7_EFW-7.2

Exam Name:Fortinet NSE 7 - Enterprise Firewall 7.2

Exam Questions:57

Topic 1 - Exam A

Question #1 Topic 1

Refer to the exhibit, which contains a TCL script configuration on FortiManager.

An administrator has configured the TCL script on FortiManager, but the TCL script failed to apply any changes to the managed device after being run.
Why did the TCL script fail to make any changes to the managed device?

A. The TCL procedure run_cmd has not been created.
B. The TCL script must start with #include.
C. There is no corresponding #! to signify the end of the script.
D. The TCL procedure lacks the required loop statements to iterate through the changes.

Reveal Solution Discussion 5

Correct Answer: A 🗳️

Question #2 Topic 1

You want to improve reliability over a lossy IPSec tunnel.
Which combination of IPSec phase 1 parameters should you configure?

A. fec-ingress and fsc-egrsss
B. dpd and dpd-retryinterval
C. fragmentation and fragmentation-mtu
D. keepalive and keylive

Reveal Solution Discussion 13

Correct Answer: A 🗳️

Question #3 Topic 1

How are bulk configuration changes made using FortiManager CLI scripts? (Choose two.)

A. When run on the Device Database, changes are applied directly to the managed FortiGate device.
B. When run on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.
C. When run on the All FortiGate in ADOM, changes are automatically installed without the creation of a new revision history.
D. When run on the Policy Package, ADOM database, you must use the installation wizard to apply the changes to the managed FortiGate device.