Logo ExamsQA
Exit
Official Bank 0/102

Fortinet NSE 7 – Enterprise Firewall 6.2 Exam (NSE7_EFW-6.2) - Fortinet Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
102 Total Questions
1
Question
The logs in a FSSO collector agent (CA) are showing the following error: failed to connect to registry: PIKA1026 (192.168.12.232)

What can be the reason for this error?
Options
A The FortiGate cannot resolve the name of the workstation.
B The remote registry service is not running in the workstation 192.168.12.232.
C The CA cannot reach the FortiGate with the IP address 192.168.12.232.
D The CA cannot resolve the name of the workstation.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
View the exhibit, which contains a partial web filter profile configuration, and then answer the question below.

Exhibit

Which action will FortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?
Options
A FortiGate will block the connection based on the URL Filter configuration.
B FortiGate will block the connection as an invalid URL.
C FortiGate will allow the connection based on the FortiGuard category based filter configuration.
D FortiGate will exempt the connection based on the Web Content Filter configuration.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
A corporate network allows Internet Access to FSSO users only. The FSSO user student does not have Internet access after successfully logged into the Windows AD network. The output of the ‘diagnose debug authd fsso list’ command does not show student as an active FSSO user. Other FSSO users can access the Internet without problems. What should the administrator check? (Choose two.)
Select 2
Options
A The user student must belong to one or more of the monitored user groups.
B At least one of the student’s user groups must be allowed by a FortiGate firewall policy.
C The student workstation’s IP subnet must be listed in the CA’s trusted list.
D The user student must not be listed in the CA’s ignore user list.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Examine the following partial output from a sniffer command; then answer the question below.

Exhibit

What is the meaning of the packets dropped counter at the end of the sniffer?
Options
A Number of total packets dropped by the FortiGate.
B Number of packets that matched the sniffer filter and were dropped by the FortiGate.
C Number of packets that matched the sniffer filter but could not be captured by the sniffer.
D Number of packets that didn’t match the sniffer filter.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
Refer to exhibit, which contains the output of a BGP debug command.

Exhibit

Which statement explains why the state of the 10.200.3.1 peer is Connect?
Options
A The TCP session to 10.200.3.1 has not completed the 3-way handshake.
B The local router is receiving the BGP keepalives from the peer, but it has not received a BGP prefix yet.
C The local router has received the BGP prefixes from the remote peer.
D The local router is receiving BGP keepalives from the remote peer, but the local peer has not received the OpenConfirm yet.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.