An administrator is configuring a FortiGate to offload as much traffic as possible to the NP. They have a policy that allows traffic from the 'internal' zone to the 'external' zone. To maximize offloading, which configuration should the administrator apply to this policy?

Enable logging for all sessions

Enable NAT and keep security profiles disabled

Enable SSL inspection and application control

What happens to a session on a FortiGate when the NP cannot offload it?

The session is forwarded to another FortiGate in the cluster

The session is dropped and the client must retry

The session is processed by the main CPU instead

The session is offloaded to the Control Processor (CP)

A FortiGate is deployed in a high-throughput environment. The administrator is reviewing the architecture and wants to understand the difference between the CP and the main CPU. Which statement correctly differentiates the roles of the CP and the main CPU?

The CP handles all traffic, and the main CPU is only for management

The CP and the main CPU are the same component

The CP handles control-plane traffic, and the main CPU handles complex data-plane tasks

The CP handles data-plane traffic, and the main CPU handles control-plane traffic

Under which condition will a FortiGate typically offload a session to the Network Processor (NP)?

When the session is between two VLANs on the same FortiGate and uses NAT

When the session requires deep packet inspection with application control

When the session uses a feature that is supported by the NP, such as IPsec VPN or simple forwarding

When the session is initiated by the FortiGate itself, such as a management connection

FortinetNSE 7 - Enterprise Firewall Administrator

Domain 1Objective 2

Configure Hardware Acceleration on FortiGate NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR Practice Questions (Page 2)

Part of the System Configuration domain, which makes up ~32% of our current practice bank. Fortinet does not publish an official question count, but from its 70-minute exam (~30–45 total, ~10–14 in this domain), expect 2–3 from this objective — we provide 14 practice questions to prepare you well beyond it. (estimate)

14questions here

3free pages

3concepts

Questions 6–10

6expert · hard
An administrator is configuring a FortiGate to offload as much traffic as possible to the NP. They have a policy that allows traffic from the 'internal' zone to the 'external' zone. To maximize offloading, which configuration should the administrator apply to this policy?
Select an answer first
7foundation · easy
To identify whether a specific session is offloaded to the NP, which FortiGate command would you use?
Select an answer first
8foundation · easy
What happens to a session on a FortiGate when the NP cannot offload it?
Select an answer first
9application · medium
A FortiGate is deployed in a high-throughput environment. The administrator is reviewing the architecture and wants to understand the difference between the CP and the main CPU. Which statement correctly differentiates the roles of the CP and the main CPU?
Select an answer first
10foundation · easy
Under which condition will a FortiGate typically offload a session to the Network Processor (NP)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR” is a trademark of its owner, used for identification only.