Fortinet Exam NSE7_EFW-7.2 Topic 3 Question 11 Discussion

Actual exam question for Fortinet's NSE7_EFW-7.2 exam

Question #: 11
Topic #: 3

Which two statements about the Security Fabric are true? (Choose two.)

AEach member of the Security Fabric maintains the shared Security Fabric map.

BOnly the root FortiGate collects network topology information and forwards it to FortiAnalyzer.

CFortiGate uses the FortiTelemetry protocol to communicate with FortiAnalyzer.

DEach FortiGate device in the Security Fabric must have bidirectional FortiTelemetry connectivity.

EOnly FortiGate devices with configuration-sync sel to Local receive and synchronize the global CMDB objects that the root FortiGate sends.

Show Suggested Answer

Suggested Answer: B, D

The neighbor-group command in FortiOS allows for the application of common settings to a group of neighbors in OSPF, and can also be used to simplify configuration by applying common settings to both IBGP and EBGP neighbors. This grouping functionality is a part of the FortiOS CLI and is documented in the Fortinet CLI reference.

by Shannon at Apr 21, 2024, 04:04 AM

Limited Time Offer

25%

Off

Get Premium NSE7_EFW-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Gerry

16 days ago

I'm not sure about C and E. Can someone explain why FortiGate uses FortiTelemetry and how configuration-sync works?

upvoted 0 times

...

Viva

17 days ago

I agree with you, Beth. Each member maintaining the shared map and having bidirectional connectivity makes sense.

upvoted 0 times

...

Beth

18 days ago

I think A and D are true about the Security Fabric.

upvoted 0 times

...

Cordie

19 days ago

Option E seems a bit tricky. I'm not familiar with the concept of 'configuration-sync sel'. Hopefully, the explanation in the study guide can clear that up for me.

upvoted 0 times

Nada

50 minutes ago

C) FortiGate uses the FortiTelemetry protocol to communicate with FortiAnalyzer.

upvoted 0 times

...

Malcolm

6 days ago

A) Each member of the Security Fabric maintains the shared Security Fabric map.

upvoted 0 times

...

Mary

20 days ago

Definitely agree with options C and D. The FortiTelemetry protocol is key for the Security Fabric to function properly, and each FortiGate needs to have that connectivity.

upvoted 0 times

...

Cristen

21 days ago

Hmm, I'm not sure about option B. Isn't the root FortiGate supposed to collect the topology information and share it with the rest of the Security Fabric? I'll have to double-check that one.

upvoted 0 times

...