FORTINET-NSE7-SPECIALTY Practice Exam 1 — 20 Questions

Question 1

You are setting up an SD-WAN configuration via FortiManager. Which object type is used to group multiple WAN interfaces for SD-WAN member assignment?

Accepted Answer

SD-WAN Zone. The 'SD-WAN Zone' object is used in FortiManager to group multiple interfaces together for use in SD-WAN policies.

Answer

IP Pool

Answer

Virtual Wire Pair

Answer

Interface Group

Question 2

Which FortiManager feature allows an administrator to test policy changes in a sandbox environment before applying them to production FortiGates?

Accepted Answer

Policy Package Cloning/Revision History. The 'Revision History' or 'Policy Package cloning' allows admins to modify and verify changes before pushing them to the production devices.

Answer

Policy Testing Mode

Answer

Global Policy Lockdown

Answer

Device Manager Simulation

Question 3

In a BGP deployment, your FortiGate is receiving routes from two different ISPs. You want to influence outbound traffic to prefer ISP1 for specific destinations. Which BGP attribute should you modify?

Accepted Answer

Local Preference. Local Preference is used to influence outbound traffic selection within an AS.

Answer

Weight

Answer

AS-Path

Answer

Multi-Exit Discriminator (MED)

Question 4

You are configuring BGP and need to advertise a summary route to your ISP. How do you ensure only the summary route is advertised?

Accepted Answer

Use an aggregate-address with summary-only. The 'aggregate-address' command with the 'summary-only' option is the correct way to advertise only the summary and suppress specific component routes.

Answer

Use a distribute-list

Answer

Set the weight to 0

Answer

Configure a route map with a prefix list

Question 5

What is the effect of changing the IPS 'buffer' size on a FortiGate device?

Accepted Answer

It determines the maximum size of data packets to hold for inspection. Adjusting the IPS buffer affects how much data is held in memory for inspection, which can prevent packet drops during heavy traffic but increases memory load.

Answer

It disables the hardware acceleration engine

Answer

It changes the signature timeout

Answer

It increases the number of concurrent IPS connections

Question 6

A network administrator is configuring an HA cluster with two FortiGates in Active-Passive mode. Which parameter must be identical on both devices to ensure a successful cluster formation?

Accepted Answer

HA Group ID. In an HA cluster, devices must share identical HA group IDs, passwords, and heartbeats to form a cluster.

Answer

Device Hostname

Answer

Serial Number

Answer

Priority value

Question 7

You are configuring an IPS policy to protect a web server. You notice that traffic is being dropped due to a false positive. Which action is the most efficient way to resolve this while maintaining security?

Accepted Answer

Create an IPS sensor override for the specific signature ID. Using an IPS sensor override or a specific signature exemption allows you to modify the behavior for a single signature without disabling it globally.

Answer

Change the IPS mode from blocking to monitoring

Answer

Disable the entire IPS sensor profile

Answer

Increase the IPS packet buffer size

Question 8

A FortiManager administrator needs to ensure that logs from all enterprise FortiGates are aggregated and purged based on storage thresholds. Where is this configured?

Accepted Answer

FortiAnalyzer/Log Settings under Device Manager. The log retention and storage settings are managed in the FortiManager's 'FortiView' or 'Device Settings' regarding log management, specifically under 'Log Settings' where disk quota and retention policies are defined.

Answer

System settings under 'Network' tab

Answer

Global Policy settings

Answer

ADOM management settings

Question 9

Which component of FortiManager allows for the centralized management of firmware across multiple devices?

Accepted Answer

Firmware Management. The 'Firmware Management' tool is dedicated to tracking, uploading, and deploying firmware to managed FortiGates.

Answer

Policy Database

Answer

Device Templates

Answer

Log View

Question 10

In an OSPF setup, you have a redundant path. You want to ensure traffic prefers one link over another based on cost. Which OSPF command is used?

Accepted Answer

set ospf-cost. The OSPF cost is configured on the interface level to influence link preference.

Answer

set metric-type

Answer

set bandwidth-reference

Answer

set priority

Question 11

Which FortiGate feature should be enabled to prevent internal users from accessing malicious websites based on real-time threat intelligence?

Accepted Answer

Web Filter. Web Filtering using categories provides real-time protection by checking URLs against the FortiGuard database.

Answer

Antivirus profile

Answer

Application Control

Answer

DNS Filter

Question 12

Which type of script in FortiManager is designed to run on the FortiManager itself rather than the managed devices?

Accepted Answer

TCL scripts. TCL scripts can be used to automate FortiManager functions, whereas CLI scripts typically target the managed devices.

Answer

CLI scripts

Answer

Configuration scripts

Answer

Policy scripts

Question 13

Which TWO items must be configured to ensure a FortiGate can successfully resolve external hostnames?

Accepted Answer

A firewall policy allowing DNS traffic from internal clients to the FortiGate. DNS settings are required for the FortiGate itself to resolve external names, and firewall policies must allow DNS traffic if the client uses the FortiGate as a DNS proxy.

Answer

An OSPF area configuration

Answer

An IPSec tunnel for DNS traffic

Answer

A static route to the internet

Question 14

Which CLI command shows the current HA synchronization status and the checksums of the configurations?

Accepted Answer

get system ha status. 'get system ha status' provides the overall cluster health, including checksum comparison between nodes.

Answer

diag hardware ha

Answer

show system ha

Answer

diagnose sys ha sync

Question 15

Which TWO administrative actions require a 'Workspace Mode' enabled in FortiManager?

Accepted Answer

Locking policies for editing. Workspace mode is required for concurrent editing and locking of policies by multiple administrators.

Answer

Automatic log rotation

Answer

Creating new ADOMs

Answer

Forcing a reboot

Question 16

Which TWO actions can be performed on a Revision History item in FortiManager?

Accepted Answer

Compare with current version. Revision history allows you to compare versions (diff) and restore to a previous state.

Answer

Delete the entire ADOM

Answer

Export the revision to an external cloud

Answer

Modify the version permanently

Question 17

What is the primary function of the FortiGate Security Fabric?

Accepted Answer

To synchronize security policies and share intelligence across devices. The Security Fabric integrates multiple devices to provide coordinated, end-to-end security visibility and control.

Answer

To configure OSPF automatically

Answer

To increase the throughput of the firewall

Answer

To replace the need for an IPS sensor

Question 18

An administrator notices that logs are not appearing in FortiManager for a specific FortiGate. What is the first thing to check to ensure log forwarding is active?

Accepted Answer

Log forwarding configuration on the FortiGate. Checking the 'Log Settings' on the FortiGate to ensure the 'Remote Logging' feature is enabled and pointing to the correct FortiManager/FortiAnalyzer IP.

Answer

The FortiManager license

Answer

The device's physical connection

Answer

The firmware version of the FortiGate

Question 19

Which TWO types of reports can be generated in the FortiAnalyzer module of FortiManager?

Accepted Answer

Custom reports. FortiAnalyzer provides both pre-defined reports and custom reports for tailored analysis.

Answer

Policy change impact reports

Answer

Hardware diagnostic reports

Answer

Firmware compatibility reports

Question 20

Which method is the most secure for managing FortiGate devices remotely?

Accepted Answer

HTTPS with restricted access via Trusted Hosts. SSH with key-based authentication or HTTPS with restricted access is standard; HTTPS is common for GUI access.

Answer

HTTP with password authentication

Answer

Telnet

Answer

SNMPv1