NSE7_EFW-7.0 Fortinet NSE 7 - Enterprise Firewall 7.0 - Practice Questions

Question 1

You have configured FortiManager as a local FDS to provide FortiGate AV and IPS updates, but FortiGate devices are not receiving updates to their AV signature databases, IPS engines, or IPS signature databases.

Which two settings need to be verified for these features to function? (Choose two.)

Select all that apply, then click Submit answer.

○
FortiGate needs to have the server list entry for FortiManager set to server-type update under config system central-management.
○
FortiManager needs to be the license validation server for FortiGate devices trying to retrieve updated AV and IPS packages.
○
Service access needs to be enabled on FortiManager under System Settings > Network.
○
FortiGate needs to have include-default-servers disabled under config system central-management.

Question 2

How are bulk configuration changes made using FortiManager CLI scripts? (Choose two.)

Select all that apply, then click Submit answer.

○
When run on the All FortiGate in ADOM, changes are automatically installed without the creation of a new revision history.
○
When run on the Device Database, changes are applied directly to the managed FortiGate device.
○
When run on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.
○
When run on the Policy Package, ADOM database, you must use the installation wizard to apply the changes to the managed FortiGate device

Reference / correct answer:

When run on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.

When run on the Policy Package, ADOM database, you must use the installation wizard to apply the changes to the managed FortiGate device

CLI scripts can be run in three different ways:Device Database: By default, a script is executed on the device database. It is recommend you run the changes on the device database (default setting), as this allows you to check what configuration changes you will send to the managed device. Once scripts are run on the device database, you can install these changes to a managed device using the installation wizard.

Policy Package, ADOM database: If a script contains changes related to ADOM level objects andpolicies, you can change the default selection to run on Policy Package, ADOM database and can then be installed using the installation wizard.

Remote FortiGate directly (through CLI): A script can be executed directly on the device and you don’t need to install these changes using the installation wizard. As the changes are directly installed on the managed device, no option is provided to verify and check the configuration changes through FortiManager prior to executing it.

Question 3

Which the following events can trigger the election of a new primary unit in a HA cluster? (Choose two.)

Select all that apply, then click Submit answer.

○
Primary unit stops sending HA heartbeat keepalives.
○
The FortiGuard license for the primary unit is updated.
○
One of the monitored interfaces in the primary unit is disconnected.
○
A secondary unit is removed from the HA cluster.

NSE7_EFW-7.0 – Fortinet NSE 7 - Enterprise Firewall 7.0