Free NSE7_EFW-7.2 Questions for Fortinet NSE 7 - Enterprise Firewall 7.2 NSE7_EFW-7.2 Exam as PDF & Practice Test Engine

Exam Code/Number: NSE7_EFW-7.2
Exam Name/Title: Fortinet NSE 7 - Enterprise Firewall 7.2
Certification Provider: Fortinet
Corresponding Certification: NSE 7 Network Security Architect

Exam Questions: 82
Updated On: Aug 23, 2026

Question #1

Exhibit.

ISFW is installed in the access layer NGFW is performing SNAT and web tittering DCFW is running IPS Which two statements are true regarding the Security Fabric logging? (Choose two.)

A. The SMB session which is forwarded to NGFW logs that event

B. DCFW generates traffic logs for all sessions from Corporate File Server

C. The web session forwarded to the NGFW generates the relevant UTM logs along with initial traffic log

D. DCFW is responsible for generating UTM logs for file server sessions initiated by Client-1. only if an IPS inspection is triggered

E. ISFW is responsible for generating traffic logs for only Web traffic and SMB traffic from Client-1.

Discussion 0

Correct Answer: D,E Vote an answer

Question #2

In which two ways does fortiManager function when it is deployed as a local FDS? (Choose two)

A. It provides VM license validation services

B. It caches available firmware updates for unmanaged devices

C. lt can be configured as an update server a rating server or both

D. It supports rating requests from non-FortiGate devices.

Discussion 0

Correct Answer: A,C Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #3

Refer to the exhibit, which shows a routing table.

What two options can you configure in OSPF to block the advertisement of the 10.1.10.0 prefix? (Choose two.)

A. Configure a distribute-list-out

B. Remove the 16.1.10.C prefix from the OSPF network

C. Disable Redistribute Connected

D. Configure a route-map out

Discussion 0

Correct Answer: A,D Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #4

Refer to the exhibit, which shows a custom signature.

Which two modifications must you apply to the configuration of this custom signature so that you can save it on FortiGate? (Choose two.)

A. Add severity.

B. Start options with --.

C. Ensure that the header syntax is F-SBID.

D. Add attack_id.

Discussion 0

Correct Answer: A,C Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #5

Which two statements about IKE version 2 fragmentation are true? (Choose two.)

A. The reassembly timeout default value is 30 seconds.

B. It is performed at the IP layer.

C. The maximum number of IKE version 2 fragments is 128.

D. Only some IKE version 2 packets are considered fragmentable.

Discussion 0

Correct Answer: C,D Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #6

Which two statements about metadata variables are true? (Choose two.)

A. They apply only to non-firewall objects.

B. The metadata format is $<metadata_variabie_name>.

C. You create them on FortiGate

D. They can be used as variables in scripts

Discussion 0

Correct Answer: B,D Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #7

Refer to the exhibit.

The exhibit shows a prefix list configuration
What can you conclude from the above prefix-list configuration?

A. The prefixes 10.10.0/16 and 10.0.0.0/16 will be denied

B. The prefix 10.10.0.0/16 will be denied

C. The prefix 10.0.0.0/8 will be permitted

D. The prefix 10.10.10.0/24 will be permitted

Discussion 0

Correct Answer: D Vote an answer

Question #8

Exhibit.

Refer to the exhibit which provides information on BGP neighbors
What can you conclude from this command output?

A. The local FortiGate starts sending its routing table with its iBGP peer

B. The local FortiGate has initiated a TCP connection, but there is no response from its BGP peer

C. The local FortiGate is having a fully established and active BGP connection with its peer

D. The local FortiGate is missing the config neighbor command in its BGP configuration

Discussion 0

Correct Answer: B Vote an answer

Question #9

Refer to the exhibit, which shows a partial routing table.

What two conclusions can you draw from the FortiGate output shown in the exhibit? (Choose two.)

A. FortiGate creates separate virtual interfaces for each VPN client.

B. FortiGate is not using the destination subnets of the quick mode selectors to populate the routing table.

C. net-device is disabled in the tunnel IPSec phase 1 configuration.

D. add-route is enabled in the tunnel IPSec phase 1 configuration.

Discussion 0

Correct Answer: B,C Vote an answer

Free NSE7_EFW-7.2 Questions for Fortinet NSE 7 - Enterprise Firewall 7.2 NSE7_EFW-7.2 Exam as PDF & Practice Test Engine

Download Free Fortinet NSE7_EFW-7.2 Demo