Free NSE7_EFW-7.2 Practice Questions and Answers | Updated 2025

• Question 1

  In which two ways does fortiManager function when it is deployed as a local FDS? (Choose two)

  • Lt can be configured as an update server a rating server or both
  • It provides VM license validation services
  • It supports rating requests from non-FortiGate devices.
  • It caches available firmware updates for unmanaged devices

  Show Answer Answer: A, ,B Next

• Question 2

  Which statement about network processor (NP) ofloading is true?

  • For TCP traffic FortiGate CPU ofloads the first packets of SYN/ACK and ACK of the three-way handshake to NP
  • The NP provides IPS signature matching
  • You can disable the NP for each firewall policy using the command np-acceleration st to loose.
  • The NP checks the session key or IPSec SA

  Show Answer Answer: B Next

• Question 3

  You want to configure faster failure detection for BGPWhich parameter should you enable on both connected FortiGate devices?

  • Ebgp-enforce-multihop
  • Bfd
  • Distribute-list-in
  • Graceful-restart

  Show Answer Answer: B Next

• Question 4

  Which two statements about the Security fabric are true? (Choose two.)

  • FortiGate uses the FortiTelemetry protocol to communicate with FortiAnatyzer.
  • Only the root FortiGate sends logs to FortiAnalyzer
  • Only FortiGate devices with configuration-sync receive and synchronize global CMDB objects that the toot FortiGate sends
  • Only the root FortiGate collects network topology information and forwards it to FortiAnalyzer

  Show Answer Answer: B,C Next

• Question 5

  You want to improve reliability over a lossy IPSec tunnel.Which combination of IPSec phase 1 parameters should you configure?

  • Fec-ingress and fec-egress
  • Odpd and dpd-retryinterval
  • Fragmentation and fragmentation-mtu
  • Keepalive and keylive

  Show Answer Answer: C Next