We're so confident of our products that we provide no hassle product exchange.
Fortinet NSE7_FSN_AR-7.6 Exam Overview:
| Certification Vendor: | Fortinet |
| Exam Name: | Fortinet NSE 7 - Secure Networking 7.6 Architect |
| Exam Number: | NSE7_FSN_AR-7.6 |
| Related Certifications: | NSE 7 - SASE NSE 7 - Cloud Security NSE 7 - Security Operations |
| Certificate Validity Period: | 2 years |
| Available Languages: | English |
| Exam Price: | USD 400 |
| Exam Format: | Multiple choice, Scenario-based questions |
| Passing Score: | Pass/Fail |
| Real Exam Qty: | 35-40 |
| Exam Duration: | 75 minutes |
| Recommended Training: | SD-WAN Enterprise Administrator Enterprise Firewall Administrator |
| Exam Registration: | Pearson VUE Fortinet Exam Registration Fortinet Training Institute |
| Sample Questions: | Fortinet NSE7_FSN_AR-7.6 Sample Questions |
| Exam Way: | Pearson VUE testing centers or Pearson VUE OnVUE online proctored exam. |
| Pre Condition: | No formal prerequisite. Fortinet recommends hands-on experience with FortiGate and Secure Networking solutions. Recommended preparation includes Enterprise Firewall Administrator and SD-WAN Enterprise Administrator training. |
| Official Syllabus URL: | https://training.fortinet.com/local/staticpage/view.php?page=secure_networking_architect_exam |
Fortinet NSE7_FSN_AR-7.6 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Enterprise Firewall | - Authentication and identity - Routing and advanced networking - VPN technologies - Security Fabric integration - High availability - Troubleshooting - Advanced firewall deployment - Centralized management and analytics |
| SD-WAN | - Deployment and troubleshooting - Performance SLA - SD-WAN routing - Application steering - Overlay VPN - SD-WAN architecture |
Fortinet NSE 7 - Secure Networking 7.6 Architect Sample Questions:
1. Refer to the exhibit, which shows a partial output of the real-time LDAP debug.
What two actions can the administrator take to resolve this issue? (Choose two.)
A) Ensure the user is a member of at least one AD group to ensure step 4 of the LDAP authentication process is successful.
B) Ensure the user is providing the correct user credentials.
C) Ensure the user logs in using ' John Smith ' not ' jsmith ' .
D) Ensure the account is active.
2. Refer to the exhibit, which shows a truncated output of a real-time RADIUS debug.
Which two statements are true? (Choose two answers)
A) The RADIUS server queried for authentication is located at IP address 172.25.188.164.
B) Two-factor authentication was required.
C) The authentication scheme used was pop3.
D) Authentication was unsuccessful.
E) Authentication was successful.
3. You want to configure two static routes: one that references a zone and a second one that references an SD- WAN member that belongs to that zone.
Which statement about this scenario is true? (Choose one answer.)
A) You cannot create static routes for individual SD-WAN members.
B) You cannot create static routes that reference an SD-WAN zone.
C) The destination subnets must be different.
D) The source subnets must be different.
4. A VPN tunnel is up. To monitor traffic flow, the administrator enters the following CLI commands on an SSH session on FortiGate:
# diagnose debug enable
# diagnose sniffer packet any ' udp and port 500 ' 4
However, the sniffer does not show any output. Assuming default configuration values, what are two possible reasons there is no output? (Choose two answers)
A) The sniffer output will be ignored because running diagnose debug enable shows only application real- time debugs.
B) The filter should be modified to also capture packets for TCP port 443 or UDP port 4500.
C) The sniffer must be restricted to the remote peer IP address.
D) NAT Traversal is enabled.
5. Refer to the exhibit.
An IPsec VPN tunnel is dropping, as shown by the debug output.
Analyzing the debug output, what could be causing the tunnel to go down?
A) Dead Peer Detection is not receiving its acknowledge packet.
B) The tunnel drops during rekey negotiation.
C) Phase 2 drops but Phase 1 is up.
D) The tunnel drops after the timer expires.
Solutions:
| Question # 1 Answer: B,D | Question # 2 Answer: A,E | Question # 3 Answer: C | Question # 4 Answer: B,D | Question # 5 Answer: A |
By Page
