NSE7 Matching — 10 Questions

Question 1

Match each SD-WAN component to its role.

Accepted Answer

SD-WAN Rule: Determines traffic steering based on criteria like source, destination, application.. Correct matches: SD-WAN Rule → traffic steering; Performance SLA → link quality monitoring; Virtual-WAN-Link → interface grouping. Common confusions mix these roles.

Answer

SD-WAN Rule: Monitors link quality metrics (latency, jitter, packet loss) against thresholds.

Answer

Performance SLA: Groups WAN interfaces into a logical bundle for load balancing.

Answer

Virtual-WAN-Link: Determines traffic steering based on criteria like source, destination, application.

Question 2

Match each IPsec VPN term to its definition.

Accepted Answer

IKE: Protocol used to establish security associations and authenticate peers.. Correct matches: IKE establishes SAs and authenticates peers; SPI is an index to identify SAs; ESP provides confidentiality, authentication, and integrity. Common confusions include swapping IKE and SA definitions.

Answer

IKE: A set of parameters defining how IPsec processes traffic between peers.

Answer

IPsec SA: Protocol used to establish security associations and authenticate peers.

Question 3

Match each FortiGate interface type to its usage.

Accepted Answer

Physical interface: A hardware port that provides direct network connectivity. The correct matches: Physical Interface → hardware port; VLAN Interface → logical interface for 802.1Q tagging; Loopback Interface → always-up virtual interface; Aggregate Interface → combines multiple physical interfaces. Common confusions include mixing the definitions of loopback and VLAN, or confusing physical interfaces with aggregate interfaces.

Answer

Physical interface: A logical interface that combines multiple physical interfaces

Answer

VLAN interface: A virtual interface that is always up

Question 4

Match each FortiGate security profile to its category.

Accepted Answer

Antivirus Profile: Protects against malware by scanning files and email attachments.. The correct matches are: Antivirus for malware scanning, Web Filter for URL categorization, and Application Control for app identification. Common confusions arise between Antivirus and Web Filter roles.

Answer

Antivirus Profile: Controls web content based on categories.

Answer

Web Filter Profile: Scans for viruses in traffic.

Question 5

Match each high availability (HA) mode to its characteristic.

Accepted Answer

Active-Passive: One unit is active, others are standby.. The correct matches are A and B. Common confusions involve swapping the characteristics: Active-Passive uses a single active unit with standby, while Active-Active uses all units to handle traffic.

Answer

Active-Passive: All units are active and load balance.

Answer

Active-Active: Only one unit processes traffic, others monitor.

Question 6

Match each FortiGate routing concept to its description.

Accepted Answer

Policy-based routing: Routes packets based on criteria other than destination IP, such as source IP or protocol. Correct matches: PBR, Route redistribution, Administrative distance, and Static route are correctly paired. ECMP and Metric are swapped; ECMP distributes traffic across equal-cost paths, while Metric compares routes within a protocol.

Answer

ECMP: A numeric value used to compare routes within the same routing protocol

Answer

Metric: Distributes traffic across multiple equal-cost paths to the same destination

Question 7

Match each Fortinet command to its function.

Accepted Answer

get system performance: Display real-time system performance statistics. Correct matches: 'get system performance' shows real-time performance statistics; 'diagnose debug application httpd' enables HTTP daemon debugging; 'execute ping' tests network connectivity; 'show system status' displays system summary. Common confusions include swapping the functions of 'get system performance' and 'execute ping'.

Answer

get system performance: Ping a network host

Answer

execute ping: Display real-time system performance statistics

Question 8

Match each Fortinet security feature to its primary function.

Accepted Answer

IPS: Inspects traffic for malicious patterns and exploits. Fortinet security features have distinct functions: IPS inspects network traffic for exploits, Application Control identifies applications, Web Filtering controls web access, and Antivirus scans for malware. Common confusions involve swapping these roles.

Answer

IPS: Scans files and content for malware

Answer

Application Control: Blocks access to malicious websites

Question 9

Match each FortiGate authentication method to its protocol.

Accepted Answer

LDAP: Lightweight Directory Access Protocol. FortiGate supports multiple authentication methods, each using a specific protocol. LDAP uses LDAP, RADIUS uses RADIUS, TACACS+ uses TACACS+, and SAML uses SAML. Common confusions include swapping LDAP and RADIUS definitions.

Answer

LDAP: Remote Authentication Dial-In User Service

Answer

RADIUS: Lightweight Directory Access Protocol

Question 10

Match each Fortinet component to its description.

Accepted Answer

FortiGate: Next-generation firewall (NGFW) with integrated security features. FortiGate is the NGFW, FortiManager manages devices, FortiAnalyzer handles logging/analytics, and FortiClient is an endpoint agent. Common confusions involve swapping these roles.

Answer

FortiGate: Centralized management for Fortinet devices

Answer

FortiManager: Next-generation firewall (NGFW) with integrated security features