A FortiGate is experiencing high latency for a new application. The administrator checks the session table and sees that the sessions are not offloaded. They also notice that the application uses IPsec VPN. What is a common reason why IPsec VPN traffic might not be offloaded to the NP?

The NP does not support the specific encryption algorithm used by the VPN

IPsec traffic is always processed by the CP

IPsec traffic is always processed by the CPU

The NP is not enabled for IPsec offloading

An administrator is troubleshooting a performance issue on a FortiGate. They suspect that a specific type of traffic is not being offloaded to the NP. They run `diagnose npu np6 session-list` and see the output. Which field in the output would confirm that a session is NOT offloaded?

The 'duration' field showing a short time

The 'proto' field showing 'UDP'

The 'src-ip' field showing an internal IP address

The 'state' field showing 'no_offload'

A FortiGate 600E is deployed as a perimeter firewall. The administrator is analyzing the packet flow for a new session. The first packet of a session arrives, and the CP (Control Processor) is involved in the initial processing. After the session is established, subsequent packets are handled by the NP (Network Processor). What is the primary role of the CP in this initial packet processing phase?

To terminate the session if it is not offloadable

To make the forwarding decision and establish the session in the session table

To perform the routing lookup and forward the packet to the next hop

To forward the packet to the NP for immediate offloading

FortinetNSE 7 - Enterprise Firewall Administrator

Domain 1Objective 2

Configure Hardware Acceleration on FortiGate NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR Practice Questions (Page 3)

Part of the System Configuration domain, which makes up ~32% of our current practice bank. Fortinet does not publish an official question count, but from its 70-minute exam (~30–45 total, ~10–14 in this domain), expect 2–3 from this objective — we provide 14 practice questions to prepare you well beyond it. (estimate)

14questions here

3free pages

3concepts

Questions 11–14

11application · medium
A FortiGate is experiencing high latency for a new application. The administrator checks the session table and sees that the sessions are not offloaded. They also notice that the application uses IPsec VPN. What is a common reason why IPsec VPN traffic might not be offloaded to the NP?
Select an answer first
12application · medium
An administrator is troubleshooting a performance issue on a FortiGate. They suspect that a specific type of traffic is not being offloaded to the NP. They run `diagnose npu np6 session-list` and see the output. Which field in the output would confirm that a session is NOT offloaded?
Select an answer first
13application · medium
A FortiGate 600E is deployed as a perimeter firewall. The administrator is analyzing the packet flow for a new session. The first packet of a session arrives, and the CP (Control Processor) is involved in the initial processing. After the session is established, subsequent packets are handled by the NP (Network Processor). What is the primary role of the CP in this initial packet processing phase?
Select an answer first
14application · medium
A FortiGate administrator is verifying that hardware acceleration is working correctly. They want to see a summary of the NP processor's status, including its CPU usage and the number of sessions offloaded. Which command provides this high-level summary?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR” is a trademark of its owner, used for identification only.

Configure Hardware Acceleration on FortiGate NSE7-ENTERPRISE-FIREWALL-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–14

A FortiGate is experiencing high latency for a new application. The administrator checks the session table and sees that the sessions are not offloaded. They also notice that the application uses IPsec VPN. What is a common reason why IPsec VPN traffic might not be offloaded to the NP?

An administrator is troubleshooting a performance issue on a FortiGate. They suspect that a specific type of traffic is not being offloaded to the NP. They run `diagnose npu np6 session-list` and see the output. Which field in the output would confirm that a session is NOT offloaded?

A FortiGate administrator is verifying that hardware acceleration is working correctly. They want to see a summary of the NP processor's status, including its CPU usage and the number of sessions offloaded. Which command provides this high-level summary?

Keep studying — System Configuration