Fortinet NSE 7 Practice Questions and answers new
solution
Which is a more accurate description of a modern firewall?
A - A device that inspects network traffic at an entry point to the internet and
within a simple, easily defined perimeter
B - A multifunctional device that inspects network traffic from the perimeter or
internally, within a network that has many different entry points
B - A multifunctional device that inspects network traffic from the perimeter or internally,
within a network that has many different entry points
Which solution specific to Fortinet enhances performance and reduces latency
for specific features and traffic?
A - Acceleration hardware, called SPUs
B - Increased RAM and CPU power
A - Acceleration hardware, called SPUs
Which protocol does FortiGate use to download antivirus and IPS packages?
A - UDP
B - TCP
B - TCP
How does FortiGate check content for spam or malicious websites?
A - Live queries to FortiGuard over UDP or HTTPS
B - Local verification using a downloaded web filter database locally on FortiGate
A - Live queries to FortiGuard over UDP or HTTPS
How do you restrict logins to FortiGate from only specific IP addresses?
A - Change the FortiGate management interface IP address.
B - Configure a trusted host.
B - Configure a trusted host.
As a best security practice when configuring administrative access to FortiGate,
which protocol should you disable?
A - Telnet
B - SSH
A - Telnet
When configuring FortiGate as a DNS server, which resolution method uses
only the FortiGate DNS database to try to resolve queries?
A - Non-recursive
B - Recursive
A - Non-recursive
solution
Which is a more accurate description of a modern firewall?
A - A device that inspects network traffic at an entry point to the internet and
within a simple, easily defined perimeter
B - A multifunctional device that inspects network traffic from the perimeter or
internally, within a network that has many different entry points
B - A multifunctional device that inspects network traffic from the perimeter or internally,
within a network that has many different entry points
Which solution specific to Fortinet enhances performance and reduces latency
for specific features and traffic?
A - Acceleration hardware, called SPUs
B - Increased RAM and CPU power
A - Acceleration hardware, called SPUs
Which protocol does FortiGate use to download antivirus and IPS packages?
A - UDP
B - TCP
B - TCP
How does FortiGate check content for spam or malicious websites?
A - Live queries to FortiGuard over UDP or HTTPS
B - Local verification using a downloaded web filter database locally on FortiGate
A - Live queries to FortiGuard over UDP or HTTPS
How do you restrict logins to FortiGate from only specific IP addresses?
A - Change the FortiGate management interface IP address.
B - Configure a trusted host.
B - Configure a trusted host.
As a best security practice when configuring administrative access to FortiGate,
which protocol should you disable?
A - Telnet
B - SSH
A - Telnet
When configuring FortiGate as a DNS server, which resolution method uses
only the FortiGate DNS database to try to resolve queries?
A - Non-recursive
B - Recursive
A - Non-recursive
