Logo ExamsQA
Exit
Official Bank 0/80

Fortinet NSE 7—Enterprise Firewall 7.2 (NSE7_EFW-7.2) - Fortinet Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
80 Total Questions
1
Question
Exhibit.

Exhibit

ISFW is installed in the access layer NGFW is performing SNAT and web tittering DCFW is running IPS Which two statements are true regarding the Security Fabric logging? (Choose two.)
Select 2
Options
A The web session forwarded to the NGFW generates the relevant UTM logs along with initial traffic log
B The SMB session which is forwarded to NGFW logs that event
C DCFW generates traffic logs for all sessions from Corporate File Server
D DCFW is responsible for generating UTM logs for file server sessions initiated by Client-1. only if an IPS inspection is triggered
E ISFW is responsible for generating traffic logs for only Web traffic and SMB traffic from Client-1.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
Refer to the exhibit, which contains a TCL script configuration on FortiManager.

Exhibit

An administrator has configured the TCL script on FortiManager, but the TCL script failed to apply any changes to the managed device after being run. Why did the TCL script fail to make any changes to the managed device?
Options
A The TCL script must start with #include.
B The TCL procedure run_cmd has not been created.
C The TCL procedure lacks the required loop statements to iterate through the changes.
D There is no corresponding #! to signify the end of the script.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
Refer to the exhibit, which contains a partial OSPF configuration.

Exhibit

What can you conclude from this output?
Options
A FortiGate restarts if the topology changes.
B The restarting router sends gratuitous ARP for 30 seconds.
C Neighbors maintain communication with the restarting router.
D The router sends grace LSAs before it restarts.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Exhibit.

Exhibit

Refer to the exhibit, which contains a partial policy configuration. Which setting must you configure to allow SSH?
Options
A Include SSH in the Application field
B Select an application control profile corresponding to SSH in the Security Profiles section
C Specify SSH in the Service field
D Configure pot 22 in the Protocol Options field.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
You want to configure faster failure detection for BGP

Which parameter should you enable on both connected FortiGate devices?
Options
A Distribute-list-in
B Ebgp-enforce-multihop
C Graceful-restart
D bfd
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.