Online Access Free NSE7_EFW-7.0 Exam Questions

Two independent FortiGate HA clusters are connected to the same broadcast domain. The administrator has reported that both clusters are using the same HA virtual MAC address. This creates a duplicated MAC address problem in the network. What HA setting must be changed in one of the HA clusters to fix the problem?

• A.Session pickup.
• B.Gratuitous ARPs.
• C.Group name.
• D.Group ID.

View the exhibit, which contains a partial routing table, and then answer the question below.

Assuming all the appropriate firewall policies are configured, which of the following pings will FortiGate route? (Choose two.)

• A.Source IP address 10.73.9.10, Destination IP address 10.72.3.15.
• B.Source IP address 10.72.3.52, Destination IP address 10.1.0.254.
• C.Source IP address 10.1.0.24, Destination IP address 10.72.3.20.
• D.Source IP address 10.72.3.27, Destination IP address 10.1.0.52.

An administrator has configured two FortiGate devices for an HA cluster. While testing the HA failover, the administrator noticed that some of the switches in the network continue to send traffic to the former primary unit. The administrator decides to enable the setting link-failed-signal to fix the problem. Which statement is correct regarding this command?

• A.Disables all the non-heartbeat interfaces in all the HA members for two seconds after a failover.
• B.Forces the former primary device to shut down all its non-heartbeat interfaces for one second while the failover occurs.
• C.Sends a link failed signal to all connected devices.
• D.Sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.

View the exhibit, which contains the output of diagnose sys session list, and then answer the question below.

If the HA ID for the primary unit is zero (0), which statement is correct regarding the output?

• A.This session is for HA heartbeat traffic.
• B.This session cannot be synced with the slave unit.
• C.The inspection of this session has been offloaded to the slave unit.
• D.This session is synced with the slave unit.

Refer to the exhibit, which shows a central management configuration.

Which server will FortiGate choose for web filter rating requests, if 10.0.1.240 is experiencing an outage?

• A.10.0.1.243
• B.10.0.1.242
• C.10.0.1.244
• D.Public FortiGuard servers