Home / Fortinet / NSE4_FGT-7.2

Fortinet NSE4_FGT-7.2 Practice Test - Questions Answers, Page 8

Question list

List of questions

Question 71

(0)

Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy-based inspection mode? (Choose two.)

Question 72

(0)

Examine this FortiGate configuration: How does the FortiGate handle web proxy traffic coming from the IP address 10.2.1.200 that requires authorization?

Question 73

(0)

Which two types of traffic are managed only by the management VDOM? (Choose two.)

Question 74

(0)

Refer to the exhibit. Which contains a network diagram and routing table output. The Student is unable to access Webserver. What is the cause of the problem and what is the solution for the pro

Question 75

(0)

Which CLI command will display sessions both from client to the proxy and from the proxy to the servers?

Question 76

(0)

Which three criteria can a FortiGate use to look for a matching firewall policy to process traffic? (Choose three.)

Question 77

(0)

Which scanning technique on FortiGate can be enabled only on the CLI?

Question 78

(0)

Refer to the exhibit to view the application control profile. Based on the configuration, what will happen to Apple FaceTime?

Question 79

(0)

An administrator must disable RPF check to investigate an issue. Which method is best suited to disable RPF without affecting features like antivirus and intrusion prevention system?

Question 80

(0)

An administrator is configuring an Ipsec between site A and siteB. The Remotes Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 19

Question 71

Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy-based inspection mode? (Choose two.)

Warning

Exempt

Allow

Learn

Show Answer Comment (0)

Question 72

Examine this FortiGate configuration:

How does the FortiGate handle web proxy traffic coming from the IP address 10.2.1.200 that requires authorization?

It always authorizes the traffic without requiring authentication.

It drops the traffic.

It authenticates the traffic using the authentication scheme SCHEME2.

It authenticates the traffic using the authentication scheme SCHEME1.

Show Answer Comment (0)

Question 73

Which two types of traffic are managed only by the management VDOM? (Choose two.)

FortiGuard web filter queries

PKI

Traffic shaping

DNS

Show Answer Comment (0)

Question 74

Refer to the exhibit.

Which contains a network diagram and routing table output.

The Student is unable to access Webserver.

What is the cause of the problem and what is the solution for the problem?

The first packet sent from Student failed the RPF check. This issue can be resolved by adding a static route to 10.0.4.0/24 through wan1.

The first reply packet for Student failed the RPF check. This issue can be resolved by adding a static route to 10.0.4.0/24 through wan1.

The first reply packet for Student failed the RPF check . This issue can be resolved by adding a static route to 203.0. 114.24/32 through port3.

The first packet sent from Student failed the RPF check. This issue can be resolved by adding a static route to 203.0. 114.24/32 through port3.

Show Answer Comment (0)

Question 75

Which CLI command will display sessions both from client to the proxy and from the proxy to the servers?

diagnose wad session list

diagnose wad session list | grep hook-pre&&hook-out

diagnose wad session list | grep hook=pre&&hook=out

diagnose wad session list | grep 'hook=pre'&'hook=out'

Show Answer Comment (0)

Question 76

Which three criteria can a FortiGate use to look for a matching firewall policy to process traffic? (Choose three.)

Source defined as Internet Services in the firewall policy.

Destination defined as Internet Services in the firewall policy.

Highest to lowest priority defined in the firewall policy.

Services defined in the firewall policy.

Lowest to highest policy ID number.

Show Answer Comment (0)

Question 77

Which scanning technique on FortiGate can be enabled only on the CLI?

Heuristics scan

Trojan scan

Antivirus scan

Ransomware scan

Show Answer Comment (0)

Question 78

Refer to the exhibit to view the application control profile.

Based on the configuration, what will happen to Apple FaceTime?

Apple FaceTime will be blocked, based on the Excessive-Bandwidth filter configuration

Apple FaceTime will be allowed, based on the Apple filter configuration.

Apple FaceTime will be allowed only if the filter in Application and Filter Overrides is set to Learn

Apple FaceTime will be allowed, based on the Categories configuration.

Show Answer Comment (0)

Question 79

An administrator must disable RPF check to investigate an issue.

Which method is best suited to disable RPF without affecting features like antivirus and intrusion prevention system?

Enable asymmetric routing, so the RPF check will be bypassed.

Disable the RPF check at the FortiGate interface level for the source check.

Disable the RPF check at the FortiGate interface level for the reply check .

Enable asymmetric routing at the interface level.

Show Answer Comment (0)

An administrator is configuring an Ipsec between site A and siteB. The Remotes Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192. 16. 1.0/24 and the remote quick mode selector is 192. 16.2.0/24. How must the administrator configure the local quick mode selector for site B?

192. 168.3.0/24

192. 168.2.0/24

192. 168. 1.0/24

192. 168.0.0/8

Show Answer Comment (0)

Total 184 questions