Summer Special 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bestdeal

Free Fortinet NSE7_EFW-7.0 Practice Exam with Questions & Answers | Set: 3

Questions 21

View the global IPS configuration, and then answer the question below.

NSE7_EFW-7.0 Question 21

Which of the following statements is true regarding this configuration?

Options:
A.

IPS will scan every byte in every session.

B.

FortiGate will spawn IPS engine instances based on the system load.

C.

New packets will be passed through without inspection if the IPS socket buffer runs out of memory.

D.

IPS will use the faster matching algorithm which is only available for units with more than 4 GB memory.

Fortinet NSE7_EFW-7.0 Premium Access
Questions 22

In which two ways does FortiManager function when it is deployed as a local FDS? (Choose two.)

Options:
A.

It provides VM license validation services.

B.

It supports rating requests from non-FortiGate devices.

C.

It caches available firmware updates for unmanaged devices.

D.

It can be configured as an update server, a rating server, or both.

Questions 23

The logs in a FSSO collector agent (CA) are showing the following error:

failed to connect to registry: PIKA1026 (192.168.12.232)

What can be the reason for this error?

Options:
A.

The CA cannot resolve the name of the workstation.

B.

The FortiGate cannot resolve the name of the workstation.

C.

The remote registry service is not running in the workstation 192.168.12.232.

D.

The CA cannot reach the FortiGate with the IP address 192.168.12.232.

Questions 24

Examine the following partial outputs from two routing debug commands; then answer the question below.

# get router info kernel

tab=254 vf=0 scope=0type=1 proto=11 prio=0 0.0.0.0/0.0.0.0/0->0.0.0.0/0 pref=0.0.0.0

gwy=10.200.1.254 dev=2(port1)

tab=254 vf=0 scope=0type=1 proto=11 prio=10 0.0.0.0/0.0.0.0/0->0.0.0.0/0 pref=0.0.0.0

gwy=10.200.2.254 dev=3(port2)

tab=254 vf=0 scope=253type=1 proto=2 prio=0 0.0.0.0/0.0.0.0/.->10.0.1.0/24 pref=10.0.1.254

gwy=0.0.0.0 dev=4(port3)

# get router info routing-table all s*0.0.0.0/0 [10/0] via 10.200.1.254, portl [10/0] via 10.200.2.254, port2, [10/0] dO.0.1.0/24 is directly connected, port3 dO.200.1.0/24 is directly connected, portl d0.200.2.0/24 is directly connected, port2

Which outbound interface or interfaces will be used by this FortiGate to route web traffic from internal users to the Internet?

Options:
A.

port!

B.

port2.

C.

Both portl and port2.

D.

port3.

Questions 25

Refer to the exhibit, which shows a session entry. Which statement about this session is true?

NSE7_EFW-7.0 Question 25

Options:
A.

It is an ICMP session from 10.1.10.10 to 10.200.5. 1.

B.

It is a TCP session in close_wait state, from 10. l. 10.10 to 10.200.1.1.

C.

It is an ICMP session from 10.1.10.10 to 10.200.1.1.

D.

It is a TCP session in the established state, from 10.1.10.10 to 10.200.5.1.

Questions 26

An administrator has enabled HA session synchronization in a HA cluster with two members. Which flag is added to a primary unit’s session to indicate that it has been synchronized to the secondary unit?

Options:
A.

redir.

B.

dirty.

C.

synced

D.

nds.

Questions 27

View the exhibit, which contains the partial output of a diagnose command, and then answer the question below.

NSE7_EFW-7.0 Question 27

Based on the output, which of the following statements is correct?

Options:
A.

Anti-reply is enabled.

B.

DPD is disabled.

C.

Quick mode selectors are disabled.

D.

Remote gateway IP is 10.200.5.1.

Questions 28

View the exhibit, which contains a partial routing table, and then answer the question below.

NSE7_EFW-7.0 Question 28

Assuming all the appropriate firewall policies are configured, which of the following pings will FortiGate route? (Choose two.)

Options:
A.

Source IP address 10.1.0.24, Destination IP address 10.72.3.20.

B.

Source IP address 10.72.3.27, Destination IP address 10.1.0.52.

C.

Source IP address 10.72.3.52, Destination IP address 10.1.0.254.

D.

Source IP address 10.73.9.10, Destination IP address 10.72.3.15.

Questions 29

A FortiGate has two default routes:

NSE7_EFW-7.0 Question 29

All Internet traffic is currently using port1. The exhibit shows partial information for one sample session of Internet traffic from an internal user:

NSE7_EFW-7.0 Question 29

What would happen with the traffic matching the above session if the priority on the first default route (IDd1) were changed from 5 to 20?

Options:
A.

The session would be deleted, and the client would need to start a new session.

B.

The session would remain in the session table, and its traffic would start to egress from port2.

C.

The session would remain in the session table, but its traffic would now egress from both port1 and port2.

D.

The session would remain in the session table, and its traffic would still egress from port1.

Questions 30

Refer to the exhibit, which contains a CLI script configuration on FortiManager.

NSE7_EFW-7.0 Question 30

An administrator configured the CLI script on FortiManager, but the script failed to apply any changes to the managed device after being executed.

What are two reasons why the script did not make any changes to the managed device? (Choose two.)

Options:
A.

Static routes can be added using only TCL scripts.

B.

The commands that start with the # sign did not run.

C.

CLI scripts must start with #!.

D.

Incomplete commands can cause CLI scripts to fail.

Exam Code: NSE7_EFW-7.0
Certification Provider: Fortinet
Exam Name: Fortinet NSE 7 - Enterprise Firewall 7.0
Last Update: Jul 11, 2025
Questions: 163

Fortinet Free Exams

Fortinet Free Exams
Access free Fortinet exam study guides and practice tests at Examstrack. Ensure your success with top-notch preparation resources at Examstrack.