Free Access to Fortinet.NSE7_EFW-7.2.v2025-06-23.q77 with Valid Practice Test (Page 6)

Question 21

You want to improve reliability over a lossy IPSec tunnel.
Which combination of IPSec phase 1 parameters should you configure?

A.fec-ingress and fec-egress
B.Odpd and dpd-retryinterval
C.fragmentation and fragmentation-mtu
D.keepalive and keylive

Question 22

Which two statements about bfd are true? (Choose two)

A.It can support neighbor only over the next hop in BGP
B.You can disable it at the protocol level
C.It works for OSPF and BGP
D.You must configure n globally only

Question 23

You want to configure faster failure detection for BGP
Which parameter should you enable on both connected FortiGate devices?

A.Ebgp-enforce-multihop
B.bfd
C.Distribute-list-in
D.Graceful-restart

Question 24

You are testing the implementation of a new custom remote desktop application in your network In which two ways can you eliminate false positives in IPS during this testing phase? (Choose two)

A.Enable the preserve source pore option in the firewall policy
B.Adjust the rate-based signature threshold and its duration.
C.Permanently bypass the affected endpoints
D.Create an IP address exception

Question 25