Logo ExamsQA
Exit
Official Bank 0/163

Fortinet NSE 7 – Enterprise Firewall 7.0 (NSE7_EFW-7.0) - Fortinet Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
163 Total Questions
1
Question
View the central management configuration shown in the exhibit, and then answer the question below.

Exhibit

Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?
Options
A 10.0.1.244
B 10.0.1.240
C One of the public FortiGuard distribution servers
D 10.0.1.242
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
Refer to the exhibit, which shows a session entry. Which statement about this session is true?

Exhibit
Options
A It is an ICMP session from 10.1.10.10 to 10.200.1.1.
B 10.10 to 10.200.1.1.
C It is an ICMP session from 10.1.10.10 to 10.200.5. 1.
D It is a TCP session in close_wait state, from 10.
E It is a TCP session in the established state, from 10.1.10.10 to 10.200.5.1.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
View the IPS exit log, and then answer the question below. # diagnose test application ipsmonitor 3 ipsengine exit log”
pid = 93 (cfg), duration = 5605322 (s) at Wed Apr 19 09:57:26 2017
code = 11, reason: manual

What is the status of IPS on this FortiGate?
Options
A There are communication problems between the IPS engine and the management database.
B IPS daemon experienced a crash.
C IPS engine memory consumption has exceeded the model-specific predefined value.
D All IPS-related features have been disabled in FortiGate’s configuration.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Refer to the exhibit, which contains a CLI script configuration on FortiManager.

Exhibit

two.) An administrator configured the CLI script on FortiManager, but the script failed to apply any changes to the managed device after being executed. What are two reasons why the script did not make any changes to the managed device? (Choose
Options
A CLI scripts must start with #!.
B Static routes can be added using only TCL scripts.
C The commands that start with the # sign did not run.
D Incomplete commands can cause CLI scripts to fail.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
View the exhibit, which contains the output of diagnose sys session stat, and then answer the question below.

Exhibit

Which statements are correct regarding the output shown? (Choose two.)
Select 2
Options
A No sessions have been deleted because of memory pages exhaustion.
B There are 0 ephemeral sessions.
C All the sessions in the session table are TCP sessions.
D There are 166 TCP sessions waiting to complete the three-way handshake.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.