NSE7_EFW-7.2 Practice Test practice questions, page 2 of 4, with answer review and explanations.
Question 6
Which two statements about the neighbor-group command are true? (Choose two.)
It applies common settings in an OSPF area
You can apply it in Internal BGP (IBGP) and External BGP (EBGP)
You can configure it on the GUI
It is combined with the neighbor-range parameter
Question 7
Refer to the exhibit, which contains information about an IPsec VPN tunnel. What two conclusions can you draw from the command output? (Choose two.)
Dead peer detection is set to enable
The IKE version is 2
Both IPsec SAs are loaded on the kernel
Forward error correction in phase 2 is set to enable
Question 8
Which two statements about IKE version 2 fragmentation are true? (Choose two.)
Only some IKE version 2 packets are considered fragmentable
The reassembly timeout default value is 30 seconds
It is performed at the IP layer
The maximum number of IKE version 2 fragments is 128
Question 9
An administrator has configured two FortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device. What can the administrator do to fix this problem?
Configure set link-failed-signal enable under config system ha on both cluster members
Configure set send-garp-on-failover enable under config system ha on both cluster members.
Configure remote link monitoring to detect an issue in the forwarding path.
Verify that the speed and duplex settings match between the FortiGate interfaces and the connected switch ports.
Question 10
Refer to the exhibit, which shows the output of a BGP summary. What two conclusions can you draw from this BGP summary? (Choose two.)
The BGP session with peer 10.127.0.75 is established.