Home / Fortinet / NSE4_FGT-7.2

Fortinet NSE4_FGT-7.2 Practice Test - Questions Answers

Question list

List of questions

Question 1

(0)

Which two statements are correct regarding FortiGate HA cluster virtual IP addresses? (Choose two.)

Question 2

(0)

The HTTP inspection process in web filtering follows a specific order when multiple features are enabled in the web filter profile. What order must FortiGate use when the web filter profile has feat

Question 3

(0)

If Internet Service is already selected as Source in a firewall policy, which other configuration objects can be added to the Source filed of a firewall policy?

Question 4

(0)

Which statement about the IP authentication header (AH) used by IPsec is true?

Question 5

(0)

When a firewall policy is created, which attribute is added to the policy to support recording logs to a FortiAnalyzer or a FortiManager and improves functionality when a FortiGate is integrated wit

Question 6

(0)

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

Question 7

(0)

Which two statements ate true about the Security Fabric rating? (Choose two.)

Question 8

(0)

An administrator has configured two-factor authentication to strengthen SSL VPN access. Which additional best practice can an administrator implement?

Question 9

(0)

Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?

Question 10

(0)

Which two statements are correct about NGFW Policy-based mode? (Choose two.)

Question 1

Which two statements are correct regarding FortiGate HA cluster virtual IP addresses? (Choose two.)

Heartbeat interfaces have virtual IP addresses that are manually assigned.

A change in the virtual IP address happens when a FortiGate device joins or leaves the cluster.

Virtual IP addresses are used to distinguish between cluster members.

The primary device in the cluster is always assigned IP address 169.254.0.1.

Show Answer Comment (0)

The HTTP inspection process in web filtering follows a specific order when multiple features are enabled in the web filter profile. What order must FortiGate use when the web filter profile has features enabled, such as safe search?

DNS-based web filter and proxy-based web filter

Static URL filter, FortiGuard category filter, and advanced filters

Static domain filter, SSL inspection filter, and external connectors filters

FortiGuard category filter and rating filter

Show Answer Comment (0)

Question 3

If Internet Service is already selected as Source in a firewall policy, which other configuration objects can be added to the Source filed of a firewall policy?

IP address

Once Internet Service is selected, no other object can be added

User or User Group

FQDN address

Show Answer Comment (0)

Question 4

Which statement about the IP authentication header (AH) used by IPsec is true?

AH does not provide any data integrity or encryption.

AH does not support perfect forward secrecy.

AH provides data integrity bur no encryption.

AH provides strong data integrity but weak encryption.

Show Answer Comment (0)

Question 5

When a firewall policy is created, which attribute is added to the policy to support recording logs to a FortiAnalyzer or a FortiManager and improves functionality when a FortiGate is integrated with these devices?

Log ID

Universally Unique Identifier

Policy ID

Sequence ID

Show Answer Comment (0)

Question 6

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

The firmware image must be manually uploaded to each FortiGate.

Only secondary FortiGate devices are rebooted.

Uninterruptable upgrade is enabled by default.

Traffic load balancing is temporally disabled while upgrading the firmware.

Show Answer Comment (0)

Question 7

Which two statements ate true about the Security Fabric rating? (Choose two.)

It provides executive summaries of the four largest areas of security focus.

Many of the security issues can be fixed immediately by clicking Apply where available.

The Security Fabric rating must be run on the root FortiGate device in the Security Fabric.

The Security Fabric rating is a free service that comes bundled with alt FortiGate devices.

Show Answer Comment (0)

Question 8

An administrator has configured two-factor authentication to strengthen SSL VPN access. Which additional best practice can an administrator implement?

Configure Source IP Pools.

Configure split tunneling in tunnel mode.

Configure different SSL VPN realms.

Configure host check .

Show Answer Comment (0)