Home / Fortinet / NSE4_FGT-7.2

Fortinet NSE4_FGT-7.2 Practice Test - Questions Answers, Page 4

Question list

List of questions

Question 31

(0)

Which two settings can be separately configured per VDOM on a FortiGate device? (Choose two.)

Question 32

(0)

51 Which statement is correct regarding the inspection of some of the services available by web applications embedded in third-party websites?

Question 33

(0)

An administrator wants to configure Dead Peer Detection (DPD) on IPSEC VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when no traffic is observed in the tunn

Question 34

(0)

Refer to the exhibit. The global settings on a FortiGate device must be changed to align with company security policies. What does the Administrator account need to access the FortiGate global se

Question 35

(0)

Which two statements are correct about SLA targets? (Choose two.)

Question 36

(0)

Refer to the exhibit. Given the routing database shown in the exhibit, which two statements are correct? (Choose two.)

Question 37

(0)

When configuring a firewall virtual wire pair policy, which following statement is true?

Question 38

(0)

Refer to the exhibit. An administrator is running a sniffer command as shown in the exhibit. Which three pieces of information are included in the sniffer output? (Choose three.)

Question 39

(0)

An administrator does not want to report the logon events of service accounts to FortiGate. What setting on the collector agent is required to achieve this?

Question 40

(0)

An administrator is configuring an IPsec VPN between site A and site B. The Remote Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector i

Question 31

Which two settings can be separately configured per VDOM on a FortiGate device? (Choose two.)

System time

FortiGuaid update servers

Operating mode

NGFW mode

Show Answer Comment (0)

Question 32

51 Which statement is correct regarding the inspection of some of the services available by web applications embedded in third-party websites?

The security actions applied on the web applications will also be explicitly applied on the third-party websites.

The application signature database inspects traffic only from the original web application server.

FortiGuard maintains only one signature of each web application that is unique.

FortiGate can inspect sub-application traffic regardless where it was originated.

Show Answer Comment (0)

An administrator wants to configure Dead Peer Detection (DPD) on IPSEC VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when no traffic is observed in the tunnel.

Which DPD mode on FortiGate will meet the above requirement?

Disabled

On Demand

Enabled

On Idle

Show Answer Comment (0)

Question 34

Refer to the exhibit.

The global settings on a FortiGate device must be changed to align with company security policies. What does the Administrator account need to access the FortiGate global settings?

Change password

Enable restrict access to trusted hosts

Change Administrator profile

Enable two-factor authentication

Show Answer Comment (0)

Question 35

Which two statements are correct about SLA targets? (Choose two.)

You can configure only two SLA targets per one Performance SLA.

SLA targets are optional.

SLA targets are required for SD-WAN rules with a Best Quality strategy.

SLA targets are used only when referenced by an SD-WAN rule.

Show Answer Comment (0)

Question 36

Refer to the exhibit.

Given the routing database shown in the exhibit, which two statements are correct? (Choose two.)

The port3 default route has the lowest metric.

The port1 and port2 default routes are active in the routing table.

The ports default route has the highest distance.

There will be eight routes active in the routing table.

Show Answer Comment (0)

Question 37

When configuring a firewall virtual wire pair policy, which following statement is true?

Any number of virtual wire pairs can be included, as long as the policy traffic direction is the same.

Only a single virtual wire pair can be included in each policy.

Any number of virtual wire pairs can be included in each policy, regardless of the policy traffic direction settings.

Exactly two virtual wire pairs need to be included in each policy.

Show Answer Comment (0)

Question 38

Refer to the exhibit.

An administrator is running a sniffer command as shown in the exhibit.

Which three pieces of information are included in the sniffer output? (Choose three.)

Interface name

Ethernet header

IP header

Application header

Packet payload

Show Answer Comment (0)

Question 39

An administrator does not want to report the logon events of service accounts to FortiGate. What setting on the collector agent is required to achieve this?

Add the support of NTLM authentication.

Add user accounts to Active Directory (AD).

Add user accounts to the FortiGate group fitter.

Add user accounts to the Ignore User List.

Show Answer Comment (0)

Question 40

An administrator is configuring an IPsec VPN between site A and site B. The Remote Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192. 168. 1.0/24 and the remote quick mode selector is 192. 168.2.0/24.

Which subnet must the administrator configure for the local quick mode selector for site B?

192. 168. 1.0/24

192. 168.0.0/24

192. 168.2.0/24

192. 168.3.0/24

Show Answer Comment (0)

Total 184 questions