NSE7_NST-7.2 Exam Training Practice Tests (Fortinet NSE 7 - Network Security 7.2 Support Engineer)]

Question 1

Refer to the exhibit.

FortiGate has already been configured with a firewall policy that allows all ICMP traffic to flow from port1 to port3.
Which changes must the administrator perform to ensure the server at 10.4.0.1/24 receives the echo reply from the laptop at 10.1.0.1/24?

A. Modify the default gateway on thelaptop from 10.1.0.2 to 10.2.0.2 B. Enable asymmetric routing under config system settings. C. Change the configuration from strict RPF check mode to feasible RPF check mode D. A firewall policy that allows all ICMP traffic from port3 to port1.

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

Refer to the exhibit, which shows a truncated output of a real-time RADIUS debug.

Which two statements are true? (Choose two.)

A. Authentication was successful B. The authentication scheme used was pop3. C. The RADIUS server queried for authentication is located at IP address 172.25.188.164. D. Two-factor authentication was required. E. Authentication was unsuccessful.

Correct Answer: C,E

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

Refer to the exhibit, which shows the output of get router info ospf neighbor.

What can you conclude from the command output?

A. The local FortiGate is the BDR. B. The network type connectingthe local Fortigate and OSPF neighbor 0.0.0.10 is point-to-point. C. All neighbors are in area 0.0.0.0. D. The local FortiGate Is not a DROther.

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

Refer to the exhibit. whichcontains the output of diagnose vpn tunnellist.

Which command will capture ESP traffic for the VPN named DialUp_0?

A. diagnose sniffer packet any 'esp and host 10*200.3.2' B. diagnose sniffer packet any 'port 4500' C. diagnose sniffer packet any 'host10.0.10.10' D. diagnose sniffer packet any 'ip proto 50'

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Fortinet NSE 7 - Network Security 7.2 Support Engineer - NSE7_NST-7.2 Exam Practice Test