Free NSE7-EFW-7-2 Fortinet NSE7-EFW-7-2 Practice Test Question - Page 2

Question 4 (Topic 1)

Refer to the exhibit, which shows the output from the webfilter fortiguard cache dump and webfilter categories commands. Using the output, how can an administrator determine the category of the training.fortinet.com website?

Select an option, then click Submit answer.

○ The administrator can look up the hex value of 34 in the second command output.
○ The administrator must convert the first two digits of the Domain hex value to a decimal value.
○ The administrator must convert the first three digits of the IP hex value to binary.
○ The administrator must add both the Domain and IPhex values of 34 to get the category number.

Reference / correct answer:

The administrator must convert the first two digits of the Domain hex value to a decimal value.

Most accepted answer: B. The administrator must convert the first two digits of the Domain hex value to a decimal value.

Community votes: A=2, B=4

Selected Answer: B The rating by domain name is the first two digits of the first number from left to right upvoted 2 times

Selected Answer: B B is correct upvoted 2 times

Selected Answer: B A is wrong because the values from the second command are decimal and not hex. B is correct because if you convert 34hex to decimal you get 52. upvoted 2 times

Selected Answer: B the command get webfilter cat lists all the categories with their respective ID numbers. In this list the ID are represented in DECIMAL ...... page 246 study guide is easy ! upvoted 2 times

Answer is B. Study guide page 246. "The command get webfilter categories lists all the categories with their respective ID numbers. In this list, the IDs are represented in decimal. So, if you want to find the category name for a URL in the cache, use the first command to list the cache, and convert the ID number from hexadecimal to decimal. Then, use the second command to find the category name for that ID number." upvoted 2 times

Question 5 (Topic 1)

Refer to the exhibit, which shows a network diagram. Which IPSec phase 2 configuration should you implement so that only one remote site is connected at any time?

Select an option, then click Submit answer.

○ Set net-device to enable.
○ Set route-overlap to allow.
○ Set single-source to enable.
○ Set route-overlap to either use-new or use-old.

Question 6 (Topic 1)

Which ADVPN configuration must be configured using a script on FortiManager, when using VPN Manager to manage FortiGate VPN tunnels?

Select an option, then click Submit answer.

○ Enable AD-VPN in IPsec phase 1
○ Configure IP addresses on IPsec virtual interfaces
○ Set protected network to all
○ Disable add-route on hub

Free NSE7-EFW-7-2 – Fortinet NSE7-EFW-7-2 Practice Test Question