Question 1

Exhibit.

Refer to the exhibit, which shows information about an OSPF interlace What two conclusions can you draw from this command output? (Choose two.)

Options :

A : The port3 network has more man one OSPF router

B : The OSPF routers are in the area ID of 0.0.0.1.

C : The interfaces of the OSPF routers match the MTU value that is configured as 1500.

D : NGFW-1 is the designated router

Answer: A,C

Question 2

Exhibit.

Refer to the exhibit, which contains a CLI script configuration on fortiManager. An administrator configured

the CLI script on FortiManager rut the script tailed to apply any changes to the managed

device after being executed.

What are two reasons why the script did not make any changes to the managed device? (Choose two)

Options :

A : The commands that start with the # sign did not run.

B : Incomplete commands can cause CLI scripts to fail.

C : Static routes can be added using only TCI scripts.

D : CLI scripts must start with #!.

Answer: A,B

Question 3

Referto theexhibit, which shows a networkdiagram.

Which IPsec phase 2 configuration should you impalement so that only one remote site is connected at any

time?

Options :

A : Set route-overlap to allow.

B : Set single-source to enable

C : Set route-overlap to either use—new or use-old

D : Set net-device to enable

Answer: C

Question 4

You created a VPN community using VPN Manager on FortiManager. You also added gateways to the VPN community. Now you are trying to create firewall policies to permit traffic over the tunnel however, the VPN interfaces do not appear as available options.

Options :

A :

Create interface mappings for the IPsec VPN interfaces before you use them in a policy.

B :

Refresh the device status using the Device Manager so that FortiGate populates the IPSec interfaces

C :

Configure the phase 1 settings in the VPN community that you didnt initially configure. FortiGate automatically generates the interfaces after you configure the required settings

D :

install the VPN community and gateway configuration on the fortiGate devices so that the VPN interfaces appear on the Policy Objects on fortiManager.

Answer: D

Question 5

Refer to the exhibit, which shows a network diagram.

Which protocol should you use to configure the FortiGate cluster?

Options :

A : FGCP in active-passive mode

B : FGSP

C : VRRP

D : FGCP in active-active mode

Answer: A

Higher Test Marks with Free Online NSE7_EFW-7.2 Exam Practice

Buying Options: