We're so confident of our products that we provide no hassle product exchange.
Fortinet NSE7_FSN_AR-7.6 Exam Overview:
| Certification Vendor: | Fortinet |
| Exam Name: | Fortinet NSE 7 - Secure Networking 7.6 Architect |
| Exam Number: | NSE7_FSN_AR-7.6 |
| Exam Format: | Multiple choice, Scenario-based questions |
| Real Exam Qty: | 35-40 |
| Related Certifications: | NSE 7 - SASE NSE 7 - Cloud Security NSE 7 - Security Operations |
| Passing Score: | Pass/Fail |
| Certificate Validity Period: | 2 years |
| Exam Price: | USD 400 |
| Exam Duration: | 75 minutes |
| Available Languages: | English |
| Recommended Training: | Enterprise Firewall Administrator SD-WAN Enterprise Administrator |
| Exam Registration: | Fortinet Training Institute Pearson VUE Fortinet Exam Registration |
| Sample Questions: | Fortinet NSE7_FSN_AR-7.6 Sample Questions |
| Exam Way: | Pearson VUE testing centers or Pearson VUE OnVUE online proctored exam. |
| Pre Condition: | No formal prerequisite. Fortinet recommends hands-on experience with FortiGate and Secure Networking solutions. Recommended preparation includes Enterprise Firewall Administrator and SD-WAN Enterprise Administrator training. |
| Official Syllabus URL: | https://training.fortinet.com/local/staticpage/view.php?page=secure_networking_architect_exam |
Fortinet NSE7_FSN_AR-7.6 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Topic 1: Enterprise Firewall | - VPN technologies - Authentication and identity - High availability - Security Fabric integration - Troubleshooting - Advanced firewall deployment - Centralized management and analytics - Routing and advanced networking |
| Topic 2: SD-WAN | - Overlay VPN - SD-WAN routing - Performance SLA - Deployment and troubleshooting - Application steering - SD-WAN architecture |
Fortinet NSE 7 - Secure Networking 7.6 Architect Sample Questions:
1. Which two statements about Security Fabric communications are true? (Choose two.)
A) By default, the downstream FortiGate establishes a connection with the upstream FortiGate using TCP port 8013.
B) The default port for Neighbor Discovery can be modified.
C) FortiTelemetry must be manually enabled on the FortiGate interface.
D) FortiTelemetry and Neighbor Discovery both operate using TCP.
2. 
The output of a policy route table entry is shown.
Which type of policy route does the output show?
A) An SD-WAN rule
B) A regular policy route, which is not associated with an active static route in the FIB
C) An ISDB route
D) A regular policy route, which is associated with an active static route in the FIB
3. Refer to the exhibit.
The port1 interface configuration on FortiGate and partial session information for ICMP traffic are shown.
Which two things happen to the session information if a routing change occurs that affects this session?
(Choose two answers)
A) This session will be unaffected by routing changes. The routing changes will apply only to new sessions.
B) The session information will not change even when the active route has been removed from the routing table.
C) The session will be flagged as dirty but no route lookups will be performed.
D) The session information will not change unless the current route has been removed from the routing table.
4. Refer to the exhibit.
The routing table information is shown.
Assuming a default configuration, which three statements about the RPF check on FortiGate are correct? (Choose three.)
A) User A: Pass. The default static route through want passes the RPF check regardless of the source IP address.
B) User B: Fail. There is no route to 95.56.234.24 using wan2 in the routing table.
C) User C: Fail. There is no route to 10.0.4.63 using port1 in the routing table.
D) User B: Pass. FortiGate will use asymmetric routing using want to reply to traffic for 95.56.234.24.
E) User C: Pass. FortiGate will forward all incoming packets from User C using the default static route.
5. Which Iwo troubleshooting steps should you perform lf you encounter issues with intermittent web filter behavior? (Choose two.)
A) Check that the correct port is mapped to HTTP in the Protocol Options
B) Check that the communication between FortiGate and FortiGuard is stable
C) Check that the inspection mode configured for the web filter profile matches that of the firewall policy where it is applied.
D) Check that FortiGate is not entering conserve mode.
Solutions:
| Question # 1 Answer: A,C | Question # 2 Answer: A | Question # 3 Answer: A,D | Question # 4 Answer: A,B,C | Question # 5 Answer: B,D |
By Selena
