Free Fortinet NSE7_EFW-7.0 Exam Dumps and NSE7

Question No: 1

MultipleChoice

What conditions are required for two FortiGate devices to form an OSPF adjacency? (Choose three.)

Options

AIP addresses are in the same subnet.

BHello and dead intervals match.

COSPF IP MTUs match.

DOSPF peer IDs match.

EOSPF costs match.

Question No: 2

MultipleChoice

What global configuration setting changes the behavior for content-inspected traffic while FortiGate is in system conserve mode?

Options

Aav-failopen

Bmem-failopen

Cutm-failopen

Dips-failopen

Question No: 3

MultipleChoice

Which two statements about FortiManager is true when it is deployed as a local FDS? (Choose two.)

Options

AIt caches available firmware updates for unmanaged devices.

BIt can be configured as an update server, or a rating server, but not both.

CIt supports rating requests from both managed and unmanaged devices.

DIt provides VM license validation services.

Question No: 4

MultipleChoice

When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filter web requests when the client browser does not provide the server name indication (SNI) extension?

Options

AFortiGate uses the requested URL from the user's web browser.

BFortiGate uses the CN information from the Subject field in the server certificate.

CFortiGate blocks the request without any further inspection.

DFortiGate switches to the full SSL inspection method to decrypt the data.

Question No: 5

MultipleChoice

Refer to the exhibit, which contains the output of get system ha status.

Which two statements about the output are true? (Choose two.)

Options

AThe slave configuration is synchronized with the master.

Bport7 is used as the HA heartbeat on all devices in the cluster.

CPrimary is selected based on the priority configured under config system ha.

DThe HA management IP is 169.254.0.2.