Fortinet NSE4_FGT-7.2 Practice Test - Questions Answers, Page 7
List of questions
Question 61
Refer to the exhibit.
The exhibit displays the output of the CLI command: diagnose sys ha dump-by vcluster.
Which two statements are true? (Choose two.)
Question 62
Refer to the exhibit.
The exhibit displays the output of the CLI command: diagnose sys ha dump-by vcluster.
Which two statements are true? (Choose two.)
Question 63
Refer to the exhibit.
A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up. but phase 2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, what configuration change will bring phase 2 up?
Question 64
Which three options are the remote log storage options you can configure on FortiGate? (Choose three.)
Question 65
A network administrator is configuring a new IPsec VPN tunnel on FortiGate. The remote peer IP address is dynamic. In addition, the remote peer does not support a dynamic DNS update service.
What type of remote gateway should the administrator configure on FortiGate for the new IPsec VPN tunnel to work?
Question 66
An administrator has configured outgoing Interface any in a firewall policy. Which statement is true about the policy list view?
Question 67
Which statement correctly describes NetAPI polling mode for the FSSO collector agent?
Question 68
An administrator has configured the following settings:
What are the two results of this configuration? (Choose two.)
Question 69
In an explicit proxy setup, where is the authentication method and database configured?
Question 70
In consolidated firewall policies, IPv4 and IPv6 policies are combined in a single consolidated policy. Instead of separate policies. Which three statements are true about consolidated IPv4 and IPv6 policy configuration? (Choose three.)
Question