Pass the Fortinet NSE 7 Network Security Architect NSE7_EFW-7.2 Questions and answers with ExamsMirror

It can support neighbor only over the next hop in BGP

You can disable it at the protocol level

It works for OSPF and BGP

You must configure n globally only

Create interface mappings for the IPsec VPN interfaces before you use them in a policy.

Refresh the device status using the Device Manager so that FortiGate populates the IPSec interfaces

Configure the phase 1 settings in the VPN community that you didnt initially configure. FortiGate automatically generates the interfaces after you configure the required settings

install the VPN community and gateway configuration on the fortiGate devices so that the VPN interfaces appear on the Policy Objects on fortiManager.

lt only uses BGP for dynamic routing

It requires all the devices must be on the same AS for inter-region ADVPN topology

lt is a combination of hub-and spoke and full-mesh topologies

It supports only on single hub-and spoke architecture

FortiGate creates separate virtual interfaces for each VPN client.

add-route is enabled in the tunnel IPSec phase 1 configuration.

FortiGate is not using the destination subnets of the quick mode selectors to

populate the routing table.

net-device is disabled in the tunnel IPSec phase 1 configuration.