Refer to the exhibit, which shows the output of a BGP debug command.Which statement explains why the state of the 10.200.3.1 peer is Connect?
Answer(s): C
Refer to the exhibit, which contains a CLI script configuration on FortiManager.An administrator configured the CLI script on FortiManager, but the script failed to apply any changes to the managed device after being executed.What are two reasons why the script did not make any changes to the managed device? (Choose two.)
Answer(s): B,D
ref CLI scripts do not include Tool Command Language (Tcl) commands, and the first line of the script is not "#!" as it is for Tcl scripts. https://help.fortinet.com/fmgr/50hlp/56/5-6- 1/FortiManager_Admin_Guide/1000_Device%20Manager/2400_Scripts/1000_Script%20samples/02 00_CLI%20scripts+.htm
An administrator wants to capture encrypted phase 2 traffic between two FortiGate devices using the built-in sniffer.If the administrator knows that there is no NAT device located between both FortiGate devices, which command should the administrator run?
Answer(s): B
Enterprise_Firewall_7.0_Study_Guide-Online.pdf p. 443 Phase 2 : ESP => IP protocol 50 This command will capture any packets that use the IP protocol number 50, which is ESP (Encapsulating Security Payload). ESP is used to encrypt and authenticate the phase 2 traffic between two FortiGate devices1.
Refer to the exhibit, which shows the output of get system ha status. NGFW-1 and NGFW-2 have been up for a week.Which two statements about the output are true? (Choose two.)
Answer(s): A,C
A. If FGVM...649 is rebooted, FGVM...650 will become the primary that is normal since it will be the only active firewall and retain that role since override is disabled. Even after FGVM...649 rejoins the cluster, 650 will not fail over as slave. C. If port7 (heartbeat port) becomes disconnected on the secondary, both FortiGate devices will elect itself the primary because when heartbeat communication fails, all cluster members think they are the primary unit (condition referred to as Split Brain) https://docs.fortinet.com/document/fortigate/6.4.0/best-practices/493254/heartbeat- interfaces
Which two conditions would prevent a static route from being added to the routing table? (Choose two.)
Answer(s): A,D
The routing table contains only the static route with the lowest distance https://community.fortinet.com/t5/FortiGate/Technical-Note-Routing-behavior-depending-on- distance-and/ta-p/198221
Post your Comments and Discuss Fortinet NSE7_EFW-7.0 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the NSE7_EFW-7.0 content, but please register or login to continue.