Sample questions
NSE 7 - Enterprise Firewall (NSE7_EFW) practice questions
You are managing FortiGates across multiple ADOMs. How can you share common firewall objects (e.g., mail servers, common IP ranges) across these ADOMs?
An administrator wants to use FortiManager to push a configuration change to 50 FortiGates simultaneously. Which method minimizes downtime and ensures consistency?
You are setting up an SD-WAN configuration via FortiManager. Which object type is used to group multiple WAN interfaces for SD-WAN member assignment?
An enterprise firewall administrator needs to deploy different security profiles to branch offices while sharing the same firewall policy structure. Which feature should be used?
Which TWO administrative actions require a 'Workspace Mode' enabled in FortiManager?
Which TWO actions should be taken when preparing to upgrade a FortiGate HA cluster?
An administrator notices that logs are not appearing in FortiManager for a specific FortiGate. What is the first thing to check to ensure log forwarding is active?
Which FortiManager feature allows an administrator to test policy changes in a sandbox environment before applying them to production FortiGates?
A network administrator is configuring SSL inspection for a group of users. Which certificate must be installed on the client endpoints to prevent browser certificate warnings?
You need to ensure that session synchronization between HA nodes is as efficient as possible. Which parameter should be tuned in the HA configuration?
You are troubleshooting a policy installation failure where the FortiManager reports a 'Configuration conflict'. Which action should you perform to identify the root cause of the m…
Which configuration mode allows you to define a virtual MAC address for an HA cluster to prevent ARP cache issues on switches?
A FortiManager administrator needs to ensure that logs from all enterprise FortiGates are aggregated and purged based on storage thresholds. Where is this configured?
An administrator is configuring the FortiManager to manage multiple FortiGate devices across different regions. Which method ensures that the device configuration remains synchroni…
When using FortiAnalyzer integration with FortiManager, where do you view the aggregated log reports?
You want to automate the onboarding of new FortiGate units. Which FortiManager feature allows you to pre-configure devices before they connect to the network?
When adding a FortiGate to FortiManager, which mode must the FortiGate be in to allow the FortiManager to manage its configuration and policies?
Which TWO methods can be used to authenticate a FortiGate when it registers to a FortiManager?
A FortiGate is performing OSPF routing. You want to redistribute connected routes into OSPF, but only for a specific subnet. How can this be achieved?
What is the effect of changing the IPS 'buffer' size on a FortiGate device?
What is the result of 'Pushing' a policy package from FortiManager to a FortiGate?
Which method is the most secure for managing FortiGate devices remotely?
An administrator is migrating a standalone FortiGate into an existing FortiManager. What happens to the existing firewall policies on the FortiGate during the import process?
Which administrative access type is recommended to be disabled on public-facing interfaces for security best practices?