Online Access Free NSE7_EFW-7.2 Exam Questions

Exhibit.

Refer to the exhibit, which contains a CLI script configuration on fortiManager. An administrator configured the CLI script on FortiManager rut the script tailed to apply any changes to the managed device after being executed.
What are two reasons why the script did not make any changes to the managed device? (Choose two)

• A.CLI scripts must start with #!.
• B.Incomplete commands can cause CLI scripts to fail.
• C.The commands that start with the # sign did not run.
• D.Static routes can be added using only TCI scripts.

Refer to the exhibit, which shows a partial routing table.

What two conclusions can you draw from the FortiGate output shown in the exhibit? (Choose two.)

• A.FortiGate creates separate virtual interfaces for each VPN client.
• B.FortiGate is not using the destination subnets of the quick mode selectors to populate the routing table.
• C.net-device is disabled in the tunnel IPSec phase 1 configuration.
• D.add-route is enabled in the tunnel IPSec phase 1 configuration.

You contoured an address object on the tool fortiGate in a Security Fabric. This object is not synchronized with a downstream device. Which two reasons could be the cause? (Choose two)

• A.The root FortiGate has configuration-sync set to enable
• B.The downstream TortiGate has fabric-object-unification set to local
• C.The address object on the tool FortiGate has fabric-object set to disable
• D.The downstream FortiGate has configuration-sync set to local

You want to improve reliability over a lossy IPSec tunnel.
Which combination of IPSec phase 1 parameters should you configure?

• A.fragmentation and fragmentation-mtu
• B.Odpd and dpd-retryinterval
• C.fec-ingress and fec-egress
• D.keepalive and keylive

Refer to the exhibit, which contains a partial BGP combination.

You want to configure a loopback as the OGP source.
Which two parameters must you set in the BGP configuration? (Choose two)

• A.update-source
• B.ebgp-enforce-multihop
• C.ibgp-enfoce-multihop
• D.recursive-next-hop