[2026] Valid NSE7_EFW-7.2 test answers & Fortinet NSE7_EFW-7.2 exam pdf [Q44-Q63]

NEW QUESTION 44
Exhibit.

Refer to the exhibit, which contains a CLI script configuration on FortiManager.
An administrator configured the CLI script on FortiManager Which statement is true based on the script configuration?

The script successfully added a static route with gateway 10.20.121.2 on the manages device

CLI scripts must start with # l.

The commands are missing d3_cmd at beginning

The CLI scripts failed to execute because of an incomplete command

NEW QUESTION 45
Refer to the exhibit, which contains a partial OSPF configuration.

What can you conclude from this output?

Neighbors maintain communication with the restarting router.

The router sends grace LSAs before it restarts.

FortiGate restarts if the topology changes.

The restarting router sends gratuitous ARP for 30 seconds.

NEW QUESTION 46
Refer to the exhibit, which shows device registration on FortiManager.

What can you conclude about the Spoke-1 and Spoke-2 configurations with respect to the information cond:
Modified (recent auto-updated)?

Based on the policy configuration on NGFW-1, the configuration on both spokes is modified and automatically updated.

On NGFW-A, the configuration was changed and spokes are wailing for an autoupdate.

On both Spoke-1 and Spoke-2, the configuration was changed directly on the FortiGate device, and the changes were automatically retrieved by the device database.

Spoke-1 and Spoke-2 are sharing the same security policy configuration and the same policy package.

NEW QUESTION 47
Exhibit.

Refer to exhibit, which shows a central management configuration
Which server will FortiGate choose for web filler rating requests if 10.0.1.240 is experiencing an outage?

Public FortiGuard servers

10.0.1.242

10.0.1.244

10.0.1.243

NEW QUESTION 48
Refer to the exhibit, which shows the output of diagnose sys session stat.

Which statement about the output shown in the exhibit is correct?

There are two sessions that have not been removed in case of any out-of-order packets that arrive.

There are 166 TCP sessions waiting to complete the three-way handshake.

162 sessions have been deleted because of memory page exhaustion.

All the sessions in the session table are TCP sessions.

NEW QUESTION 49
Refer to the exhibit, which shows the output of a BGP summary.

What two conclusions can you draw from this BGP summary? (Choose two.)

External BGP (EBGP) exchanges routing information.

The BGP session with peer 10. 127. 0. 75 is established.

The router 100. 64. 3. 1 has the parameter bfd set to enable.

The neighbors displayed are linked to a local router with the neighbor-range set to a value of 4.

NEW QUESTION 50
Refer to the exhibit, which contains the partial interface configuration of two FortiGate devices.

Which two conclusions can you draw from this configuration? (Choose two)

10.1.5.254 is the default gateway of the internal network

On failover new primary device uses the same MAC address as the old primary

The VRRP domain uses the physical MAC address of the primary FortiGate

By default FortiGate B is the primary virtual router

NEW QUESTION 51
While configuring the BGP protocol, an administrator applies the set netuork-inport-check disable command under config network.
What will FortiGate do as a result of this command?

FortiGate will advertise only the corresponding prefixes in the BGP network table to its BGP neighbor, even if itis not in the routing table.

FortiGate will advertise all the prefixes in the BGP network table to its BGP neighbor, even f itis not in the routing table.

FortiGate will not advertise any imported routes received from one BGP neighbor to another.

FortiGate will not advertise the prefixes, if it is not in the routing table.

NEW QUESTION 52
An administrator has configured two fortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device What can the administrator do to fix this problem?

Verify that the speed and duplex settings match between me FortiGate interfaces and the connected switch ports

Configure remote Iink monitoring to detect an issue in the forwarding path

Configure set send-garp-on-failover enables under config system ha on both cluster members

Configure set link -failed signal enable under-config system ha on both Cluster members

NEW QUESTION 53
Refer to the exhibit, which shows the output of a diagnose command.

What can be concluded about the debug output in this scenario?

Servers with a negative TZ value are less preferred for rating requests.

There is a natural correlation between the value in the Packets field and the value in the Weight field.

FortiGate used 64.26.151.37 as the initial server to validate its contract.

The first server provided to FortiGate when it performed a DNS query looking for a list of rating servers, was 121.111.236.179.

NEW QUESTION 54
Refer to the exhibit.

which contains a partial configuration of the global system. What can you conclude from this output?

NPs and CPs are enabled

Only CPs arc disabled

Only NPs are disabled

NPs and CPs arc disabled

NEW QUESTION 55
Refer to the exhibit, which contains a partial configuration of the global system.

What can you conclude from this output?

Only NPs are disabled

Only CPs are disabled

NPs and CPs are enabled

NPs and CPs are disabled

NEW QUESTION 56
Refer to the exhibit, which contains a CLI script configuration on FortiManager. An administrator configured the CLI script on FortiManager, but the script failed to apply any changes to the managed device after being executed.

What are two reasons why the script did not make any changes to the managed device? (Choose two)

The commands that start with the # sign did not run.

Incomplete commands can cause CLI scripts to fail.

Static routes can be added using only TCI scripts.

CLI scripts must start with #!.

NEW QUESTION 57
Which statement about ADVPN is true?

lt only uses BGP for dynamic routing

It requires all the devices must be on the same AS for inter-region ADVPN topology

lt is a combination of hub-and spoke and full-mesh topologies

It supports only on single hub-and spoke architecture

NEW QUESTION 58
Refer to the exhibit, which shows a network diagram.

Which protocol should you use to configure the FortiGate cluster?

FGCP in active-passive mode

FGSP

VRRP

FGCP in active-active mode

NEW QUESTION 59
Refer to the exhibit which shows an OSPF network.

Which types of link-state advertisements (LSA) will NGFW-1 send if it is a backup designated router (BDR)

NGFW-1 will send type 1 and type 2 LSAs

NGFW-1 will send type 1 and type 4 LSAs.

NGFW-1 will send type 1 and type 3 LSAs

NGFW-1 will send type 1 and type 5 LSAs

NEW QUESTION 60
In which two ways does fortiManager function when it is deployed as a local FDS? (Choose two)

lt can be configured as an update server a rating server or both

It provides VM license validation services

It supports rating requests from non-FortiGate devices.

It caches available firmware updates for unmanaged devices

NEW QUESTION 61
Refer to the exhibit, which shows an OSPF network.

Which types of ink-state advertisements (LSA) will NGFW-1 send, if itis a backup designated router (BDR)?

ONGFW-1 will send type 1 and type 2 LSAs.

NGFW-1 will send type 1and type 3 LSA.

ONGFW-1 will send type 1 and type 4 LSA.

ONGFW-1 will send type 1and type 5 LSA.

NEW QUESTION 62
Refer to the exhibit, which shows a partial touting table.

What two concisions can you draw from the corresponding FortiGate configuration? (Choose two.)

IPSec Tunnel aggregation is configured

net-device is enabled in the tunnel IPSec phase 1 configuration

OSPI is configured to run over IPSec.

add-route is disabled in the tunnel IPSec phase 1 configuration.

NEW QUESTION 63
Exhibit.

Refer to the exhibit, which contains an active-active toad balancing scenario.
During the traffic flow the primary FortiGate forwards the SYN packet to the secondary FortiGate.
What is the destination MAC address or addresses when packets are forwarded from the primary FortiGate to the secondary FortiGate?