Free Fortinet NSE7_NST-7.2 Exam Dumps Questions & Answers

Which three common FortiGate-to-collector-agent connectivity issues can you identifyusing the FSSO real-time debug?(Choose three.)

• A.  Inability to reach IP address of the collector agent.
• B.  Refused connection. Potential mismatch of TCP port.
• C.  Mismatched pre-shared password.
• D.  Incompatible collector agent software version.
• E.  Log is full on the collector agent.

What is the diagnosetest applicationipsmonitor 5 command used for?

• A.  To restart all IPS engines and monitors
• B.  To disable the IPS engine
• C.  To provide information regarding IPS sessions
• D.  To enable IPS bypass mode

Exhibit.

Refer to the exhibit, which contains partial output from an IKE real-time debug.
The administrator does not have access to the remote gateway.
Based on the debug output, which configuration change can the administrator make to the local gateway to resolve the phase 1 negotiation error?

• A.  In the phase 1 proposal configuration, add AES256-SHA256 to the list of encryption algorithms.
• B.  In the phase 1 proposal configuration, add AESCBC-SHA2 to the list of encryption algorithms.
• C.  In the phase 1 proposal configuration, add AES128-SHA128 to the list of encryption algorithms.
• D.  In the phase 1 network configuration, set the IKE version to 2.

Refer to the exhibit, which shows the output of get router info ospf neighbor.

What can you conclude from the command output?

• A.  The local FortiGate Is not a DROther.
• B.  All neighbors are in area 0.0.0.0.
• C.  The local FortiGate is the BDR.
• D.  The network type connectingthe local Fortigate and OSPF neighbor 0.0.0.10 is point-to-point.

Refer to the exhibit, which shows a session table entry.

Which statement about FortiGate behavior relating to this session is true?

• A.  FortiGate forwarded this session without any inspection.
• B.  FortiGate redirected the client to the captive portal to authenticate, so that a correct policy match could be made.
• C.  FortiGate is performing a security profile inspection using the CPU.
• D.  FortiGate applied only IPS inspection to this session.