Smartly Prepare Exam with Free Online NSE7_EFW-7.2 Practice Test

We offer the latest NSE7_EFW-7.2 practice test designed for free and effective online Fortinet NSE 7 - Enterprise Firewall 7.2 certification preparation. It's a simulation of the real NSE7_EFW-7.2 exam experience, built to help you understand the structure, complexity, and topics you'll face on exam day.

Question 1

Which two statements about metadata variables are true? (Choose two.)

Options :

A : You create them on FortiGate

B : They apply only to non-firewall objects.

C : The metadata format is $.

D : They can be used as variables in scripts

Answer: A,D

Question 2

Referto theexhibit, which shows a networkdiagram.

Which IPsec phase 2 configuration should you impalement so that only one remote site is connected at any

time?

Options :

A : Set route-overlap to allow.

B : Set single-source to enable

C : Set route-overlap to either use—new or use-old

D : Set net-device to enable

Answer: C

Question 3

Which two statements about IKE vision 2 are true? (Choose two.)

Options :

A : Phase 1 includes main mode

B : It supports the extensible authentication protocol (EAP)

C : It supports the XAuth protocol.

D : It exchanges a minimum of four messages to establish a secure tunnel

Answer: B,D

Question 4

Refer to the exhibits, which show the configurations of two address objects from the same FortiGate.

Why can you modify the Engineering address object, but not the Finance address object?

Options :

A : You have read-only access.

B :

FortiGate joined the Security Fabric and the Finance address object was configured on the root FortiGate.

C : FortiGate is registered on FortiManager.

D : Another user is editing the Finance address object in workspace mode.

Answer: D

Question 5

Which two statements about bfd are true? (Choose two)

Options :

A : It can support neighbor only over the next hop in BGP

B : You can disable it at the protocol level

C : It works for OSPF and BGP

D : You must configure n globally only

Answer: B,C