Home

Home / Fortinet / NSE4_FGT-7.2

Question list

List of questions

Question 1

(0)

Which two statements are correct regarding FortiGate HA cluster virtual IP addresses? (Choose two.)

Question 2

(0)

The HTTP inspection process in web filtering follows a specific order when multiple features are enabled in the web filter profile. What order must FortiGate use when the web filter profile has feat

Question 3

(0)

If Internet Service is already selected as Source in a firewall policy, which other configuration objects can be added to the Source filed of a firewall policy?

Question 4

(0)

Which statement about the IP authentication header (AH) used by IPsec is true?

Question 5

(0)

When a firewall policy is created, which attribute is added to the policy to support recording logs to a FortiAnalyzer or a FortiManager and improves functionality when a FortiGate is integrated wit

Question 6

(0)

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

Question 7

(0)

Which two statements ate true about the Security Fabric rating? (Choose two.)

Question 8

(0)

An administrator has configured two-factor authentication to strengthen SSL VPN access. Which additional best practice can an administrator implement?

Question 9

(0)

Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?

Question 10

(0)

Which two statements are correct about NGFW Policy-based mode? (Choose two.)

Open VPLUS File

Convert VPLUS to PDF

Related questions

What are two characteristics of FortiGate HA cluster virtual IP addresses? (Choose two.)

Which two statements are correct regarding FortiGate HA cluster virtual IP addresses? (Choose two.)

Which two statements are correct about NGFW Policy-based mode? (Choose two.)

An administrator configures FortiGuard servers as DNS servers on FortiGate using default settings. What is true about the DNS connection to a FortiGuard server?

If the Issuer and Subject values are the same in a digital certificate, which type of entity was the certificate issued to?

Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy-based inspection mode? (Choose two.)

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

Which two statements are correct about SLA targets? (Choose two.)

If Internet Service is already selected as Source in a firewall policy, which other configuration objects can be added to the Source filed of a firewall policy?

Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?

Question 42 - NSE4_FGT-7.2 discussion

Report

Which two attributes are required on a certificate so it can be used as a CA certificate on SSL Inspection? (Choose two.)

A.

The keyUsage extension must be set to keyCertSign.

B.

The common name on the subject field must use a wildcard name.

C.

The issuer must be a public CA.

D.

The CA extension must be set to TRUE.

Show Answer

asked 18/09/2024

Hairul Isman Abdul Gaffar

38 questions

User

Your answer: A B C D

0 comments

Sorted by

Leave a comment first