Home / Fortinet / NSE4_FGT-7.2

Question list

List of questions

Question 1

(0)

Which two statements are correct regarding FortiGate HA cluster virtual IP addresses? (Choose two.)

Question 2

(0)

The HTTP inspection process in web filtering follows a specific order when multiple features are enabled in the web filter profile. What order must FortiGate use when the web filter profile has feat

Question 3

(0)

If Internet Service is already selected as Source in a firewall policy, which other configuration objects can be added to the Source filed of a firewall policy?

Question 4

(0)

Which statement about the IP authentication header (AH) used by IPsec is true?

Question 5

(0)

When a firewall policy is created, which attribute is added to the policy to support recording logs to a FortiAnalyzer or a FortiManager and improves functionality when a FortiGate is integrated wit

Question 6

(0)

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

Question 7

(0)

Which two statements ate true about the Security Fabric rating? (Choose two.)

Question 8

(0)

An administrator has configured two-factor authentication to strengthen SSL VPN access. Which additional best practice can an administrator implement?

Question 9

(0)

Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?

Question 10

(0)

Which two statements are correct about NGFW Policy-based mode? (Choose two.)

Question 145 - NSE4_FGT-7.2 discussion

Refer to the exhibits.

Exhibit A shows a network diagram. Exhibit B shows the firewall policy configuration and a VIP object configuration.

The WAN (port1) interface has the IP address 10.200.1.1/24.

The LAN (port3) interface has the IP address 10.0.1.254/24.

The administrator disabled the WebServer firewall policy.

Which IP address will be used to source NAT the traffic, if a user with address 10.0.1.10 connects over SSH to the host with address 10.200.3.1?

10.200.1.10

10.0.1.254

10.200.1.1

10.200.3.1

Show Answer

asked 18/09/2024

Gopakumar Nair

39 questions

Your answer: A B C D

0 comments

Sorted by