Home

Home / Fortinet / NSE4_FGT-7.2

Question list

List of questions

Question 1

(0)

Which two statements are correct regarding FortiGate HA cluster virtual IP addresses? (Choose two.)

Question 2

(0)

The HTTP inspection process in web filtering follows a specific order when multiple features are enabled in the web filter profile. What order must FortiGate use when the web filter profile has feat

Question 3

(0)

If Internet Service is already selected as Source in a firewall policy, which other configuration objects can be added to the Source filed of a firewall policy?

Question 4

(0)

Which statement about the IP authentication header (AH) used by IPsec is true?

Question 5

(0)

When a firewall policy is created, which attribute is added to the policy to support recording logs to a FortiAnalyzer or a FortiManager and improves functionality when a FortiGate is integrated wit

Question 6

(0)

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

Question 7

(0)

Which two statements ate true about the Security Fabric rating? (Choose two.)

Question 8

(0)

An administrator has configured two-factor authentication to strengthen SSL VPN access. Which additional best practice can an administrator implement?

Question 9

(0)

Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?

Question 10

(0)

Which two statements are correct about NGFW Policy-based mode? (Choose two.)

Open VPLUS File

Convert VPLUS to PDF

Related questions

What are two characteristics of FortiGate HA cluster virtual IP addresses? (Choose two.)

Which two statements are correct regarding FortiGate HA cluster virtual IP addresses? (Choose two.)

Which two statements are correct about NGFW Policy-based mode? (Choose two.)

An administrator configures FortiGuard servers as DNS servers on FortiGate using default settings. What is true about the DNS connection to a FortiGuard server?

If the Issuer and Subject values are the same in a digital certificate, which type of entity was the certificate issued to?

Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy-based inspection mode? (Choose two.)

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

If Internet Service is already selected as Source in a firewall policy, which other configuration objects can be added to the Source filed of a firewall policy?

Which two statements are correct about SLA targets? (Choose two.)

Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?

Question 175 - NSE4_FGT-7.2 discussion

Report

What is a reason for triggering IPS fail open?

A.

The IPS socket buffer is full and the IPS engine cannot process additional packets.

B.

The IPS engine cannot decode a packet.

C.

The IPS engine is upgraded.

D.

The administrator enabled NTurbo acceleration.

Show Answer

asked 18/09/2024

Lara Umemoto

49 questions

User

Your answer: A B C D

0 comments

Sorted by

Leave a comment first