Sample questions
Fortinet NSE7 Specialty Modules (SD-WAN and Enterprise Firewall tracks) (FORTINET-NSE7-SPECIALTY) practice questions
You are setting up an SD-WAN configuration via FortiManager. Which object type is used to group multiple WAN interfaces for SD-WAN member assignment?
Nse7 Enterprise Firewall Central ManagementmediumSee the answer and why each option is right or wrong →Which FortiManager feature allows an administrator to test policy changes in a sandbox environment before applying them to production FortiGates?
Nse7 Enterprise Firewall Central ManagementmediumSee the answer and why each option is right or wrong →In a BGP deployment, your FortiGate is receiving routes from two different ISPs. You want to influence outbound traffic to prefer ISP1 for specific destinations. Which BGP attribut…
You are configuring BGP and need to advertise a summary route to your ISP. How do you ensure only the summary route is advertised?
What is the effect of changing the IPS 'buffer' size on a FortiGate device?
A network administrator is configuring an HA cluster with two FortiGates in Active-Passive mode. Which parameter must be identical on both devices to ensure a successful cluster fo…
Nse7 Enterprise Firewall System ConfigurationeasySee the answer and why each option is right or wrong →You are configuring an IPS policy to protect a web server. You notice that traffic is being dropped due to a false positive. Which action is the most efficient way to resolve this…
Nse7 Enterprise Firewall Security And VPNmediumSee the answer and why each option is right or wrong →A FortiManager administrator needs to ensure that logs from all enterprise FortiGates are aggregated and purged based on storage thresholds. Where is this configured?
Nse7 Enterprise Firewall Central ManagementhardSee the answer and why each option is right or wrong →Which component of FortiManager allows for the centralized management of firmware across multiple devices?
Nse7 Enterprise Firewall Central ManagementeasySee the answer and why each option is right or wrong →In an OSPF setup, you have a redundant path. You want to ensure traffic prefers one link over another based on cost. Which OSPF command is used?
Which FortiGate feature should be enabled to prevent internal users from accessing malicious websites based on real-time threat intelligence?
Nse7 Enterprise Firewall Security And VPNmediumSee the answer and why each option is right or wrong →Which type of script in FortiManager is designed to run on the FortiManager itself rather than the managed devices?
Nse7 Enterprise Firewall Central ManagementmediumSee the answer and why each option is right or wrong →Which TWO items must be configured to ensure a FortiGate can successfully resolve external hostnames?
Nse7 Enterprise Firewall Security And VPNmediumSee the answer and why each option is right or wrong →Which CLI command shows the current HA synchronization status and the checksums of the configurations?
Nse7 Enterprise Firewall System ConfigurationeasySee the answer and why each option is right or wrong →Which TWO administrative actions require a 'Workspace Mode' enabled in FortiManager?
Nse7 Enterprise Firewall Central ManagementmediumSee the answer and why each option is right or wrong →Which TWO actions can be performed on a Revision History item in FortiManager?
Nse7 Enterprise Firewall Central ManagementmediumSee the answer and why each option is right or wrong →What is the primary function of the FortiGate Security Fabric?
An administrator notices that logs are not appearing in FortiManager for a specific FortiGate. What is the first thing to check to ensure log forwarding is active?
Nse7 Enterprise Firewall Central ManagementhardSee the answer and why each option is right or wrong →Which TWO types of reports can be generated in the FortiAnalyzer module of FortiManager?
Nse7 Enterprise Firewall Central ManagementmediumSee the answer and why each option is right or wrong →Which method is the most secure for managing FortiGate devices remotely?
Which TWO of the following are valid methods for user authentication on a FortiGate?
Nse7 Enterprise Firewall Security And VPNmediumSee the answer and why each option is right or wrong →What is the impact of changing the 'set vdom-mode' from 'no-vdom' to 'multi-vdom'?
Nse7 Enterprise Firewall System ConfigurationeasySee the answer and why each option is right or wrong →When using FortiAnalyzer integration with FortiManager, where do you view the aggregated log reports?
Nse7 Enterprise Firewall Central ManagementmediumSee the answer and why each option is right or wrong →When a policy change is made in FortiManager, it must be 'Installed' to take effect. What is the first stage of the install process?
Nse7 Enterprise Firewall Central ManagementmediumSee the answer and why each option is right or wrong →