Home

Home / Fortinet / NSE4_FGT-7.2

Question list

List of questions

Question 1

(0)

Which two statements are correct regarding FortiGate HA cluster virtual IP addresses? (Choose two.)

Question 2

(0)

The HTTP inspection process in web filtering follows a specific order when multiple features are enabled in the web filter profile. What order must FortiGate use when the web filter profile has feat

Question 3

(0)

If Internet Service is already selected as Source in a firewall policy, which other configuration objects can be added to the Source filed of a firewall policy?

Question 4

(0)

Which statement about the IP authentication header (AH) used by IPsec is true?

Question 5

(0)

When a firewall policy is created, which attribute is added to the policy to support recording logs to a FortiAnalyzer or a FortiManager and improves functionality when a FortiGate is integrated wit

Question 6

(0)

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

Question 7

(0)

Which two statements ate true about the Security Fabric rating? (Choose two.)

Question 8

(0)

An administrator has configured two-factor authentication to strengthen SSL VPN access. Which additional best practice can an administrator implement?

Question 9

(0)

Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?

Question 10

(0)

Which two statements are correct about NGFW Policy-based mode? (Choose two.)

Open VPLUS File

Convert VPLUS to PDF

Related questions

What are two characteristics of FortiGate HA cluster virtual IP addresses? (Choose two.)

Which two statements are correct regarding FortiGate HA cluster virtual IP addresses? (Choose two.)

Which two statements are correct about NGFW Policy-based mode? (Choose two.)

An administrator configures FortiGuard servers as DNS servers on FortiGate using default settings. What is true about the DNS connection to a FortiGuard server?

If the Issuer and Subject values are the same in a digital certificate, which type of entity was the certificate issued to?

Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy-based inspection mode? (Choose two.)

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

If Internet Service is already selected as Source in a firewall policy, which other configuration objects can be added to the Source filed of a firewall policy?

Which two statements are correct about SLA targets? (Choose two.)

Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?

Question 87 - NSE4_FGT-7.2 discussion

Report

Examine this output from a debug flow:

Why did the FortiGate drop the packet?

A.

The next-hop IP address is unreachable.

B.

It failed the RPF check .

C.

It matched an explicitly configured firewall policy with the action DENY.

D.

It matched the default implicit firewall policy.

Show Answer

asked 18/09/2024

Chris Houck

33 questions

User

Your answer: A B C D

0 comments

Sorted by

Leave a comment first