Home / Fortinet / NSE4_FGT-7.2

Question list

List of questions

Question 1

(0)

Which two statements are correct regarding FortiGate HA cluster virtual IP addresses? (Choose two.)

Question 2

(0)

The HTTP inspection process in web filtering follows a specific order when multiple features are enabled in the web filter profile. What order must FortiGate use when the web filter profile has feat

Question 3

(0)

If Internet Service is already selected as Source in a firewall policy, which other configuration objects can be added to the Source filed of a firewall policy?

Question 4

(0)

Which statement about the IP authentication header (AH) used by IPsec is true?

Question 5

(0)

When a firewall policy is created, which attribute is added to the policy to support recording logs to a FortiAnalyzer or a FortiManager and improves functionality when a FortiGate is integrated wit

Question 6

(0)

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

Question 7

(0)

Which two statements ate true about the Security Fabric rating? (Choose two.)

Question 8

(0)

An administrator has configured two-factor authentication to strengthen SSL VPN access. Which additional best practice can an administrator implement?

Question 9

(0)

Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?

Question 10

(0)

Which two statements are correct about NGFW Policy-based mode? (Choose two.)

Question 57 - NSE4_FGT-7.2 discussion

Refer to the exhibit.

The exhibit contains a network diagram, virtual IP, IP pool, and firewall policies configuration.

The WAN (port1) interface has the IP address 10.200. 1. 1/24.

The LAN (port3) interface has the IP address 10 .0.1.254. /24.

The first firewall policy has NAT enabled using IP Pool.

The second firewall policy is configured with a VIP as the destination address.

Which IP address will be used to source NAT the internet traffic coming from a workstation with the IP address 10.0. 1. 10?

10.200. 1. 1

10.200.3. 1

10.200. 1. 100

10.200. 1. 10

Show Answer

asked 18/09/2024

Niall Dempsey

35 questions

Your answer: A B C D

0 comments

Sorted by