Free NSE7_NST-7.2 Practice Questions and Answers | Updated 2025

• Question 1

  Which two statements about application-layer test commands ate true? (Choose two.)

  • Some of them display statistics and configuration information about a feature or process.
  • Some of them display real-time application debugs.
  • Some of them display only output, after you run the diagnose debug console enable command.
  • Some of them can be used to restart an application.

  Show Answer Answer: A,B Next

• Question 2

  There are four exchanges during IKEv2 negotiation. Which sequence is correct?IKE_Proposal, ID_Auth, PiggyBack_CHILD and Informationallnit_Req, Wait_lnit_Req, ID_Auth_Req and Create_CHILD_SAINIT_Re, INIT_Auth, ID_Child and SET_NonceIKE_SAJNIT, IKE_Auth, Create_CHILD_SA and Informational

  • Create_CHILD_SA:
  • This exchange creates additional IPsec SAs after the initial authentication. It can also be used to rekey existing IPsec SAs to maintain security.
  • Informational:
  • This is a generic exchange used for various purposes such as error notification, deletion of SAs, and other control messages.

  Show Answer Answer: D Next

• Question 3

  What are two functions of automation stitches? (Choose two.)

  • You can configure automation stitches on any FortiGate device in a Security Fabric environment.
  • You can create automation stitches to run diagnostic commands and attach the results to an email message when CPU or memory usage exceeds specified thresholds.
  • An automation stitch configured to execute actions sequentially can take parameters from previous actions as input for the current action.
  • You can set an automation stitch configured to execute actions in parallel to insert a specific delay between actions.

  Show Answer Answer: B, ,C Next

• Question 4

  Which of the following regarding protocol states is true?

  • Proto_state=00 indicates that UDP traffic flows in both directions.
  • Proto_state-01 indicates an established TCP session.
  • Proto_state=10 indicates an established TCP session.
  • Proto state=01 indicates one-way ICMP traffic.

  Show Answer Answer: C Next

• Question 5

  Consider the scenario where the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate. Which action will FortiGate take when using the default settings for SSL certificate inspection?

  • FortiGate closes the connection because this represents an invalid SSL/TLS configuration
  • FortiGate uses the 31 information from the Subject field in the server certificate.
  • FortiGate uses the first entry listed in the SAN field in the server certificate.
  • FortiGate uses the SNI from the user's web browser.

  Show Answer Answer: A Next