100% Free Fortinet NSE7_FSN_AR-7.6 Practice Test Questions

Question 1

Refer to the exhibit.The network diagram shows the addition of Site 2 with an overlapping network segment to the existing IPsecVPN connection between the hub and Site 1.Which IPsec phase 2 configuration must you make on the FortiGate hub to enable equal-cost multipath(ECMP) routing when multiple remote sites connect with overlapping subnets?

A : Set route-overlap to either use-new or use-old.

B : Set multipath to enable.

C : Set route-overlap to allow.

D : Set net-device to ecmp.

Answer: C

Question 2

Refer to the exhibit.The network diagram shows the addition of Site 2 with an overlapping network segment to the existing IPsecVPN connection between the hub and Site 1.Which IPsec phase 2 configuration must you make on the FortiGate hub to enable equal-cost multipath(ECMP) routing when multiple remote sites connect with overlapping subnets?

A : Set route-overlap to either use-new or use-old.

B : Set multipath to enable.

C : Set route-overlap to allow.

D : Set net-device to ecmp.

Answer: C

Question 3

Refer to the exhibit.The network diagram shows the addition of Site 2 with an overlapping network segment to the existing IPsecVPN connection between the hub and Site 1.Which IPsec phase 2 configuration must you make on the FortiGate hub to enable equal-cost multipath(ECMP) routing when multiple remote sites connect with overlapping subnets?

A : Set route-overlap to either use-new or use-old.

B : Set multipath to enable.

C : Set route-overlap to allow.

D : Set net-device to ecmp.

Answer: C

Question 4

Refer to the exhibit, which shows partial outputs from two routing debug commands.Why is the port2 default route not in the second command output?

A : The port2 interface is disabled in the FortiGate configuration.

B : The port1 default route has a higher priority value than the default route using port2.

C : The port1 default route has a lower priority value than the default route using port2.

D : The port1 default route has a lower distance than the default route using port2.

Answer: D

Question 5

Refer to the exhibit.If the default settings are m place, what can you conclude about the conserve mode shown in the exhibit?

A : FortiGate is currently allowing new sessions that require flow-based content inspection and blocking sessions that require proxy-based content inspection

B : FortiGate is currently allowing new sessions and will continue to allow sessions if memory increases another 6%.

C : FortiGate is currently allowing now sessions that require flow-based or proxy-based content inspection, but is not performing inspection on those sessions.

D : FortiGate is currently blocking all new sessions regardless of the content inspection requirements or configuration settings because of high memory use.

Answer: C

100% Free NSE7_FSN_AR-7.6 Practice Exam Questions and Answers