Fortinet Fortinet Certifications NSE7_EFW-7.0 Questions & Answers

• Question 161:

  What is the purpose of an internal segmentation firewall (ISFW)?

  A. It inspects incoming traffic to protect services in the corporate DMZ.

  B. It is the first line of defense at the network perimeter.

  C. It splits the network into multiple security segments to minimize the impact of breaches.

  D. It is an all-in-one security appliance that is placed at remote sites to extend the enterprise network.

  Correct Answer: C

  ISFW splits your network into multiple security segments. They serve as a breach containers from attacks that come from inside.

• Question 162:

  How does FortiManager handle FortiGuard requests from FortiGate devices, when it is configured as a local FDS?

  A. FortiManager can download and maintain local copies of FortiGuard databases.

  B. FortiManager supports only FortiGuard push to managed devices.

  C. FortiManager will respond to update requests only if they originate from a managed device.

  D. FortiManager does not support rating requests.

  Correct Answer: A

• Question 163:

  Which the following events can trigger the election of a new primary unit in a HA cluster? (Choose two.)

  A. Primary unit stops sending HA heartbeat keepalives.

  B. The FortiGuard license for the primary unit is updated.

  C. One of the monitored interfaces in the primary unit is disconnected.

  D. A secondary unit is removed from the HA cluster.

  Correct Answer: AC