Download Fortinet NSE 4 -FortiOS 7-2.CertsHero.NSE4_FGT-7.2.v4-1.2023-04-09.1e.131q.vcex

Download Exam

File Info

Exam Fortinet NSE 4 -FortiOS 7-2
Number NSE4_FGT-7.2
File Name Fortinet NSE 4 -FortiOS 7-2.CertsHero.NSE4_FGT-7.2.v4-1.2023-04-09.1e.131q.vcex
Size 7.56 Mb
Posted April 09, 2023
Downloads 91

How to open VCEX & EXAM Files?

Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.

Purchase
Coupon: EXAM_HUB

Discount: 20%

 
 



Demo Questions

Question 1
Which two statements are correct about NGFW Policy-based mode? (Choose two.)

  • A: NGFW policy-based mode does not require the use of central source NAT policy
  • B: NGFW policy-based mode can only be applied globally and not on individual VDOMs
  • C: NGFW policy-based mode supports creating applications and web filtering categories directly in afirewall policy
  • D: NGFW policy-based mode policies support only flow inspection



Question 2
Refer to the exhibit.

    

Which contains a session diagnostic output. Which statement is true about the session diagnostic output?

  • A: The session is in SYN_SENT state.
  • B: The session is in FIN_ACK state.
  • C: The session is in FTN_WAIT state.
  • D: The session is in ESTABLISHED state.



Question 3
Which two statements explain antivirus scanning modes? (Choose two.)

  • A: In proxy-based inspection mode, files bigger than the buffer size are scanned.
  • B: In flow-based inspection mode, FortiGate buffers the file, but also simultaneously transmits it tothe client.
  • C: In proxy-based inspection mode, antivirus scanning buffers the whole file for scanning, beforesending it to the client.
  • D: In flow-based inspection mode, files bigger than the buffer size are scanned.



Question 4
Refer to the web filter raw logs.

    

Based on the raw logs shown in the exhibit, which statement is correct?

  • A: Social networking web filter category is configured with the action set to authenticate.
  • B: The action on firewall policy ID 1 is set to warning.
  • C: Access to the social networking web filter category was explicitly blocked to all users.
  • D: The name of the firewall policy is all_users_web.



Question 5
Which two configuration settings are synchronized when FortiGate devices are in an active-active HA cluster? (Choose two.)

  • A: FortiGuard web filter cache
  • B: FortiGate hostname
  • C: NTP
  • D: DNS



Question 6
Why does FortiGate Keep TCP sessions in the session table for several seconds, even after both sides (client and server) have terminated the session?

  • A: To allow for out-of-order packets that could arrive after the FIN/ACK packets
  • B: To finish any inspection operations
  • C: To remove the NAT operation
  • D: To generate logs



Question 7
Which two protocols are used to enable administrator access of a FortiGate device? (Choose two.)

  • A: SSH
  • B: HTTPS
  • C: FTM
  • D: FortiTelemetry



Question 8
Refer to the exhibit.

    

Examine the intrusion prevention system (IPS) diagnostic command.
Which statement is correct If option 5 was used with the IPS diagnostic command and the outcome was a decrease in the CPU usage?

  • A: The IPS engine was inspecting high volume of traffic.
  • B: The IPS engine was unable to prevent an intrusion attack .
  • C: The IPS engine was blocking all traffic.
  • D: The IPS engine will continue to run in a normal state.



Question 9
By default, FortiGate is configured to use HTTPS when performing live web filtering with FortiGuard servers.
Which CLI command will cause FortiGate to use an unreliable protocol to communicate with FortiGuard servers for live web filtering?

  • A: set fortiguard-anycast disable
  • B: set webfilter-force-off disable
  • C: set webfilter-cache disable
  • D: set protocol tcp



Question 10
How does FortiGate act when using SSL VPN in web mode?

  • A: FortiGate acts as an FDS server.
  • B: FortiGate acts as an HTTP reverse proxy.
  • C: FortiGate acts as DNS server.
  • D: FortiGate acts as router.






CONNECT US


ProfExam
PROFEXAM WITH A 20% DISCOUNT

You can buy ProfExam with a 20% discount..

Get Now!


HOW TO OPEN VCEX AND EXAM FILES

Use ProfExam Simulator to open VCEX and EXAM files
ProfExam Screen



HOW TO OPEN VCE FILES

Use VCE Exam Simulator to open VCE files
Avanaset