8) Which two modifications must you apply to the configuration of this custom signature so that you can save it on FortiGate? (Choose two.)

A. Ensure that the header syntax is F-SBID.

9) Refer to the exhibit, which provides information on BGP neighbors What can you conclude from this command output?

B. BGP is attempting to establish a TCP connection with the BGP peer.

A. You must change the AS number to match the remote peer.

C. The bfd configuration is set to enable.

D. The routers are in the same area ID of 0.0.0.0.

10) Which action does FortiGate take if the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate? Refer to the exhibit, which shows an SSL certification inspection configuration.

B. FortiGate uses the CN information from the Subject field in the server certificate

A. FortiGate uses the first entry listed in the SAN field in the server certificate

C. FortiGate uses the SNI from the user's web browser.

D. FortiGate closes the connection because this represents an invalid SSL/TLS configuration

11.) Which statement about the designated router (DR) and backup designated router (BDR) in an OSPF multi-access network is true?

D. Non-DR and non-BDR routers send link state updates and acknowledgements to 224.0.0.6.

A. Only the DR receives link state information from non-DR routers.

B. Non-DR and non-BDR routers form full adjacencies to DR only.

C. FortiGate first checks the OSPF ID to elect a DR.

12. Refer to the exhibit, which contains an ADVPN network diagram and a partial BGP configuration. Which two parameters should you configure in config neighbor-range? (Choose two.)

D. set prefix 172.16.1.0 255.255.255.0

B. set route-reflector-client enable

C. set prefix 10.1.0 255.255.254.0

13. Which two statements about the Security Fabric are true? (Choose two.)

A. Only the root FortiGate collects network topology information and forwards it to FortiAnalyzer.

C. Only FortiGate devices with fabric-object-unification set to default will receive and synchronize global CMDB objects sent by the root FortiGate.

B. Only the root FortiGate sends logs to FortiAnalyzer.

D. FortiGate uses FortiTelemetry protocol to communicate with FortiAnalyzer.

14. Refer to the exhibit which shows an ADVPN network. Which VPN phase 1 parameters must you configure on the hub for the ADVPN feature to function? (Choose two.)

B. set auto-discovery-receiver enable

D. set auto-discovery-forwarder enable

A. set auto-discovery-sender enable

15. Refer to the exhibit, which contains a partial policy configuration. Which setting must you configure to allow SSH?

C. Include SSH in the Application field

A. Specify SSH in the Service field.

B. Select an application control profile corresponding to SSH in the Security Profiles section.

D. Configure port 22 in the Protocol Options field

16. Refer to the exhibits, which show the configurations of two address objects from the same FortiGate. Engineering address object Why can you modify the Engineering address object, but not the Finance address object?

C. FortiGate joined the Security Fabric and the Finance address object was configured on the root FortiGate.

B. Another user is editing the Finance address object in workspace mode.

D. FortiGate is registered on FortiManager.

17. You created a VPN community using VPN Manager on FortiManager. You also added gateways to the VPN community. Now you are trying to create firewall policies to permit traffic over the tunnel; however, the VPN interfaces do not appear as available options. What step must you take to resolve this issue?

B. Install the VPN community and gateway configuration on the FortiGate devices so that the VPN interfaces appear on the Policy Objects on FortiManager.

A. Refresh the device status using the Device Manager so that FortiGate populates the IPSec interfaces.

C. Configure the phase 1 settings in the VPN community that you didn’t initially configure. FortiGate automatically generates the interfaces after you configure the required settings.

D. Create interface mappings for the IPsec VPN interfaces before you use them in a policy.

18. Refer to the exhibit, which shows the output of a BGP summary. What two conclusions can you draw from this BGP summary? (Choose two.)

A. The BGP session with peer 10.127.0.75 is established.

B. External BGP (EBGP) exchanges routing information.

C. The router 100.64.3.1 has the parameter bfd set to enable.

D. The neighbors displayed are linked to a local router with the neighbor-range set to a value of 4.

19. Which two statements about the neighbor-group command are true? (Choose two.)

A. It applies common settings in an OSPF area

B. You can apply it in Internal BGP (IBGP) and External BGP (EBGP)

C. You can configure it on the GUI

D. It is combined with the neighbor-range parameter

20. What are two functions of automation stitches? (Choose two.)

B. An automation stitch configured to execute actions sequentially can take parameters from previous actions as input for the current action.

C. Automation stitches can be created to run diagnostic commands and attach the results to an email message when CPU or memory usage exceeds specified thresholds

A. Automation stitches can be configured on any FortiGate device in a Security Fabric environment.

D. An automation stitch configured to execute actions in parallel can be set to insert a specific delay between actions.

21. Refer to the exhibit, which shows config system central-management information. Which setting must you configure for the web filtering feature to function?

D. Configure server-type with the rating option.

A. Add server. fortiguard. net to the server list.

B. Configure securewf.fortiguard. net on the default servers.

C. Set update-server-location to automatic.

22. Which two statements about IKE version 2 fragmentation are true? (Choose two.)

A. Only some IKE version 2 packets are considered fragmentable

C. It is performed at the IP layer

B. The reassembly timeout default value is 30 seconds

D. The maximum number of IKE version 2 fragments is 128

23. Which statement about network processor (NP) offloading is true?

A. The NP checks the session key or IPSec SA.

B. The NP provides IPS signature matching.

C. You can disable the NP for each firewall policy using the command np-acceleration set to loose.

D. For TCP traffic, FortiGate CPU offloads the first packets of SYN/ACK and ACK of the three-way handshake to NP.

24. Which two statements about metadata variables are true? (Choose two.)

A. The metadata format is $<metadata_variable_name>

C. They can be used as variables in scripts.

B. You create them on FortiGate

D. They apply only to non-firewall objects.

25. Which two statements about ADVPN are true? (Choose two.)

B. You must configure phase 2 quick mode selectors to 0.0.0.0 0.0.0.0.

D. You must disable add-route in the hub.

A. The hub adds routes based on IKE negotiations.

C. All FortiGate devices must be in the same autonomous system (AS).

26. Refer to the exhibit, which contains a partial VPN configuration. What can you conclude from this configuration?

C. Dead peer detection is disabled

A. FortiGate creates separate virtual interfaces for each dial-up client

B. The VPN should use the dynamic routing protocol to exchange routing information through the tunnels

D. The routing table shows a single IPSec virtual interface Most Voted

27. Which two statements about the BFD parameter in BGP are true? (Choose two.)

C. It allows failure detection in less than one second.

D. It is supported for neighbors over multiple hops.

A. It detects only two-way failures

B. The two routers must be connected to the same subnet.

28. Refer to the exhibit which shows two configured FortiGate devices and peering over FGSP. The main link directly connects the two FortiGate devices and is configured using the set session-syn-dev <interface> command. What is the primary reason to configure the main link?

D. To have both sessions and configuration synchronization in layer 2

A. To have only configuration synchronization in layer 3

B. To load balance both sessions and configuration synchronization between layer 2 and 3

C. To have both sessions and configuration synchronization in layer 3

30. How are bulk configuration changes made using FortiManager CLI scripts? (Choose two.)

C. When run on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.

D. When run on the Policy Package, ADOM database, you must use the installation wizard to apply the changes to the managed FortiGate device.

A. When run on the All FortiGate in ADOM, changes are automatically installed without the creation of a new revision history.

B. When run on the Device Database, changes are applied directly to the managed FortiGate device.

31. Refer to the exhibit, which contains information about an ipsec vpn tunnel What two conclusions can you draw from the command output? (Choose two.)

C. Both IPsec SAs are loaded on the kernel

A. Dead peer detection is set to enable

D. Forward error correction in phase 2 is set to enable

32. You want to improve reliability over a lossy IPSec tunnel. Which combination of IPSec phase 1 parameters should you configure?

C. fragmentation and fragmentation-mtu

33. Refer to the exhibit, which contains a partial OSPF configuration. What can you conclude from this output?

D. The router sends grace LSAs before it restarts.

A. Neighbors maintain communication with the restarting router.

B. The restarting router sends gratuitous ARP for 30 seconds.

C. FortiGate restarts if the topology changes.

35. Refer to the exhibit, which shows an error in system fortiguard configuration. What is the reason you cannot set the protocol to udp in config system fortiguard? .

A. udp is not a protocol option.

B. fortiguard-anycast is set to enable.

C. You do not have the corresponding write access

D. FortiManager provides FortiGuard.

36. After enabling IPS, you receive feedback about traffic being dropped. What could be the reason?

C. fail-open is set to disable.

A. IPS is configured to monitor.

B. np-accel-node is set to enable.

D. traffic-submit is set to disable.

37. Refer to the exhibit, which shows a routing table What two options can you configure in OSPF to block the advertisement of the 10.1.10.0 prefix? (Choose two.)

B. Configure a distribute-list-out

A. Remove the 16.1.10.C prefix from the OSPF network

D. Disable Redistribute Connected

38. You contoured an address object on the tool fortiGate in a Security Fabric. This object is not synchronized with a downstream device. Which two reasons could be the cause? (Choose two)

A. The address object on the tool FortiGate has fabric-object set to disable

C. The downstream TortiGate has fabric-object-unification set to local

B. The root FortiGate has configuration-sync set to enable.

D. The downstream FortiGate has configuration-sync set to local

39. Which two statements about bfd are true? (Choose two)

B. You can disable it at the protocol level

A. It can support neighbor only over the next hop in BGP

D. You must configure n globally only

40. Which two statements about ADVPN are true? (Choose two)

A. auto-discovery receiver must be set to enable on the Spokes.

C. lt supports NAI for on-demand tunnels

B. Spoke to-spoke traffic never goes through the hub

D. Routing is configured by enabling add-advpn-route

41. In which two ways does fortiManager function when it is deployed as a local FDS? (Choose two)

A. lt can be configured as an update server a rating server or both

B. It provides VM license validation services

C. It supports rating requests from non-FortiGate device

D. It caches available firmware updates for unmanaged devices

42. Which FortiGate in a Security I auric sends togs to FortiAnalyzer?

B. Each FortiGate in the Security fabric

C. The FortiGate devices performing network address translation (NAT) or unified threat management (UTM). if configured

D. Only the last FortiGate that handled a session in the Security Fabric

44. Which two statements about IKE vision 2 are true? (Choose two.)

B. It supports the extensible authentication protocol (EAP)

D. It exchanges a minimum of four messages to establish a secure tunnel

C. It supports the XAuth protocol

45. Which configuration can be used to reduce the number of BGP sessions in on IBGP network?

B. Route-reflector-client enable

D. Route-reflector-server enable

46. Exhibit Refer to the exhibit, which shows the output from the webfilter fortiguard cache dump and webfilter categories commands. Using the output, how can an administrator determine the category of the training.fortinet.comam

B. The administrator can look up the hex value of 34 in the second command output.

A. The administrator must convert the first three digits of the IP hex value to binary

C. The administrator must add both the Pima in and Iphex values of 34 to get the category number

D. The administrator must convert the first two digits of the Domain hex value to a decimal value

47. After enabling IPS you receive feedback about traffic being dropped. What could be the reason?

A. Np-accel-mode is set to enable

B. Traffic-submit is set to disable

C. IPS is configured to monitor

48.Exhibit. Refer to the exhibit, which shows a partial touting table What two concisions can you draw from the corresponding FortiGate configuration? (Choose two.)

B. net-device is enabled in the tunnel IPSec phase 1 configuration

D. add-route is disabled in the tunnel IPSec phase 1 configuration.

A. IPSec Tunnel aggregation is configured

C. OSPI is configured to run over IPSec

49.Refer to the exhibit, which contains the partial interface configuration of two FortiGate devices. Which two conclusions can you draw from this con figuration? (Choose two

A. 10.1.5.254 is the default gateway of the internal network

B. On failover new primary device uses the same MAC address as the old primary

C. The VRRP domain uses the physical MAC address of the primary FortiGate

D. By default FortiGate B is the primary virtual router

50. Refer to the exhibit, which contains a CLI script configuration on FortiManager. An administrator configured the CLI script on FortiManager, but the script failed to apply any changes to the managed device after being executed. What are two reasons why the script did not make any changes to the managed device? (Choose two.)

A. The commands that start with the # sign did not run.

B. Incomplete commands can cause CLI scripts to fail.

C. Static routes can be added using only TCI scripts.

D. CLI scripts must start with #!.

51. Refer to the exhibit, which contains the partial ADVPN configuration of a spoke. Which two parameters must you configure on the corresponding single hub? (Choose two.)

A. Set auto-discovery-sender enable

C. Set auto-discovery-forwarder enable

D. Set auto-discovery-receiver enable

NSE7 ENTERPRISES

Authored by Sebastian coronado

Computers

Professional Development

Used 45+ times

AI Actions

Add similar questions

Adjust reading levels

Convert to real-world scenario

Translate activity

More...

Content View

Student View

58 questions

Show all answers

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

1 ) You want to have faster detection for OSPF.
Which parameter should you enable on both connected FortiGate devices?

A. distribute-list-in

B. rfc1583-compatible

C. restart-on-topology-change

D. bfd

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

2) Refer to the exhibit, which shows a central management configuration.
Which server will FortiGate choose for web filter rating requests, if 10.0.1.240 is experiencing an outage?

A. 10.0.1.244

B. 10.0.1.242

C. Public FortiGuard servers

D. 10.0.1.243

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

3) An administrator has configured two FortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device.
What can the administrator do to fix this problem?

A. Configure remote link monitoring to detect an issue in the forwarding path.

B. Configure set send-garp-on-failover enable under config system ha on both cluster members.

C. Verify that the speed and duplex settings match between the FortiGate interfaces and the connected switch ports.

D. Configure set link-failed-signal enable under config system ha on both cluster members.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

4) Refer to the exhibit, which contains a partial configuration of the global system.
What can you conclude from this output?

A. Only NPs are disabled

B. Only CPs are disabled

C. NPs and CPs are enable

D. NPs and CPs are disabled

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

5) Refer to the exhibits, which contain the network topology and BGP configuration for a hub.
An administrator is trying to configure ADVPN with a hub and spoke VPN setup using iBGP. All the VPNs are up and connected to the hub. The hub is receiving route information from both spokes over iBGP; however, the spokes are not receiving route information from each other.
What change must the administrator make to the hub BGP configuration so that the routes learned from one spoke are forwarded to the other spoke?

A. Configure the hub as a route reflector

B. Configure auto-discovery-sender on the hub

C. Add a prefix list to the hub that permits routes to be shared between the spokes

D. Enable route redistribution under config router bgp

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

6) Refer to the exhibit, which shows a network diagram.
Which protocol should you use to configure the FortiGate cluster?

A. FGCP in active-passive mode

B. FGCP in active-active mode

C. FGSP

D. VRRP

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

7 ) Refer to the exhibit, which contains a TCL script configuration on FortiManager.
An administrator has configured the TCL script on FortiManager, but the TCL script failed to apply any changes to the managed device after being run.
Why did the TCL script fail to make any changes to the managed device?

A. The TCL procedure run_cmd has not been created.

B. The TCL script must start with #include.

C. There is no corresponding #! to signify the end of the script

D. The TCL procedure lacks the required loop statements to iterate through the

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Similar Resources on Wayground

54 questions

Cambridge L3 IT Hardware Diagnostic Quiz

Quiz

•

Professional Development

60 questions

m06uf2ex2

Quiz

•

Professional Development

60 questions

CLF-C01 - Quiz 3

Quiz

•

Professional Development

60 questions

Machine Learning Quiz

Quiz

•

Professional Development

60 questions

NPA QUIZ for officers

Quiz

•

Professional Development

60 questions

ceh 21

Quiz

•

University - Professi...

59 questions

SQL DML e DDL

Quiz

•

2nd Grade - Professio...

60 questions

Informatika ulgn dan kisi" PAS smt 2

Quiz

•

Professional Development

Popular Resources on Wayground

15 questions

Fractions on a Number Line

Quiz

•

3rd Grade

10 questions

Probability Practice

Quiz

•

4th Grade

15 questions

Probability on Number LIne

Quiz

•

4th Grade

20 questions

Equivalent Fractions

Quiz

•

3rd Grade

25 questions

Multiplication Facts

Quiz

•

5th Grade

$fractions$

22 questions

fractions

Quiz

•

3rd Grade

6 questions

Appropriate Chromebook Usage

Lesson

•

7th Grade

10 questions

Greek Bases tele and phon

Quiz

•

6th - 8th Grade

Discover more resources for Computers

20 questions

Black History Month Trivia Game #1

Quiz

•

Professional Development

20 questions

90s Cartoons

Quiz

•

Professional Development

12 questions

Mardi Gras Trivia

Quiz

•

Professional Development

7 questions

Copy of G5_U5_L14_22-23

Lesson

•

KG - Professional Dev...

12 questions

Unit 5: Puerto Rico W1

Quiz

•

Professional Development

42 questions

LOTE_SPN2 5WEEK2 Day 4 We They Actividad 3

Quiz

•

Professional Development

15 questions

Balance Equations Hangers

Quiz

•

Professional Development

31 questions

Servsafe Food Manager Practice Test 2021- Part 1

Quiz

•

9th Grade - Professio...

NSE7 ENTERPRISES

1 ) You want to have faster detection for OSPF.Which parameter should you enable on both connected FortiGate devices?

2) Refer to the exhibit, which shows a central management configuration.Which server will FortiGate choose for web filter rating requests, if 10.0.1.240 is experiencing an outage?

3) An administrator has configured two FortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device.What can the administrator do to fix this problem?

4) Refer to the exhibit, which contains a partial configuration of the global system.What can you conclude from this output?

6) Refer to the exhibit, which shows a network diagram.Which protocol should you use to configure the FortiGate cluster?

8) Which two modifications must you apply to the configuration of this custom signature so that you can save it on FortiGate? (Choose two.)

9) Refer to the exhibit, which provides information on BGP neighborsWhat can you conclude from this command output?

10) Which action does FortiGate take if the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate?Refer to the exhibit, which shows an SSL certification inspection configuration.

Access all questions and much more by creating a free account

Similar Resources on Wayground

Popular Resources on Wayground

Discover more resources for Computers

1 ) You want to have faster detection for OSPF.
Which parameter should you enable on both connected FortiGate devices?

2) Refer to the exhibit, which shows a central management configuration.
Which server will FortiGate choose for web filter rating requests, if 10.0.1.240 is experiencing an outage?

3) An administrator has configured two FortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device.
What can the administrator do to fix this problem?

4) Refer to the exhibit, which contains a partial configuration of the global system.
What can you conclude from this output?

6) Refer to the exhibit, which shows a network diagram.
Which protocol should you use to configure the FortiGate cluster?

9) Refer to the exhibit, which provides information on BGP neighbors
What can you conclude from this command output?

10) Which action does FortiGate take if the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate?
Refer to the exhibit, which shows an SSL certification inspection configuration.