Free Practice Fortinet NSE7_EFW-7.2 Exam Questions 2025

Stay ahead with 100% Free Fortinet NSE 7 - Enterprise Firewall 7.2 NSE7_EFW-7.2 Dumps Practice Questions

Page: 1 / 16

Total 80 Questions | Updated On: Jun 06, 2025

Add To Cart

Question 1

Which two statements about metadata variables are true? (Choose two.)

A : You create them on FortiGate

B : They apply only to non-firewall objects.

C : The metadata format is $.

D : They can be used as variables in scripts

Answer: B,D

Question 2

After enabling IPS you receive feedback about traffic being dropped. What could be thereason?

A : Np-accel-mode is set to enable

B : Traffic-submit is set to disable

C : IPS is configured to monitor

D : Fail-open is set to disable

Answer: D

Question 3

Refer to the exhibit, which shows an error in system fortiguard configuration.

What is the reason you cannot set the protocol to udp in config system fortiguard?

A : FortiManager provides FortiGuard.

B : fortiguard-anycast is set to enable.

C : You do not have the corresponding write access.

D : udp is not a protocol option.

Answer: D

Question 4

Exhibit.

Refer to the exhibit,which contains an ADVPN network diagram and a partial BGP con figuration Which twoparameters Should you configure in config neighbor range? (Choose two.)

A : set prefix 172.16.1.0 255.255.255.0

B : set route reflector-client enable

C : set neighbor-group advpn

D : set prefix 10.1.0 255.255.255.0

Answer: C,D

Question 5

You want to configure faster failure detection for BGP Which parameter should you enable on both connected FortiGate devices?

A : Ebgp-enforce-multihop

B : bfd

C : Distribute-list-in

D : Graceful-restart

Answer: B

Page: 1 / 16

Total 80 Questions | Updated On: Jun 06, 2025

Add To Cart