Free Fortinet NSE7_NST-7.2 Exam Dumps Questions & Answers

Refer to the exhibit, which shows the omitted output of FortiOS kernel slabs.

Which statement is true?

• A.  The total slab size of the sctp_session slab is 0 kB and is associated with the user space
• B.  The total slab size of the tcp_sessior. slab Is 7500 kB and is associated with the kernel.
• C.  The total slab size of the ip_session slab is 3600 kB and is associated with the user space.
• D.  The total slab size of the ip6_session slab is 1300 kB and is associated with the kernel.

Refer to the exhibit, which shows a truncated output of a real-time LDAP debug.

What two conclusions can you draw from the output? (Choose two.)

• A.  FortiOS is performing the second step (Search Request) in the LDAP authentication process.
• B.  The name of the configured LDAP server is Lab.
• C.  FortiOS is able to locate the user in step 3 (Bind Request) of the LDAP authentication process.
• D.  The user is authenticating using CN=John Smith.

Refer to the exhibit, which shows a truncated output of a real-time RADIUS debug.

Which two statements are true? (Choose two.)

• A.  The authentication scheme used was pop3.
• B.  Authentication was unsuccessful.
• C.  The RADIUS server queried for authentication is located at IP address 172.25.188.164.
• D.  Two-factor authentication was required.
• E.  Authentication was successful

What are two functions of automation stitches? (Choose two.)

• A.  You can configure automation stitches on any FortiGate device in a Security Fabric environment.
• B.  You can set an automation stitch configured to execute actions in parallel to insert a specific delay between actions.
• C.  You can create automation stitches to run diagnostic commands and attach the results to an email message when CPU or memory usage exceeds specified thresholds.
• D.  An automation stitch configured to execute actions sequentially can take parameters from previous actions as input for the current action.

Exhibit.

Refer to the exhibit, which contains partial output from an IKE real-time debug.
The administrator does not have access to the remote gateway.
Based on the debug output, which configuration change can the administrator make to the local gateway to resolve the phase 1 negotiation error?

• A.  In the phase 1 proposal configuration, add AES128-SHA128 to the list of encryption algorithms.
• B.  In the phase 1 network configuration, set the IKE version to 2.
• C.  In the phase 1 proposal configuration, add AES256-SHA256 to the list of encryption algorithms.
• D.  In the phase 1 proposal configuration, add AESCBC-SHA2 to the list of encryption algorithms.