Download Fortinet NSE 4 -FortiOS 7-0.CertDumps.NSE4_FGT-7.0.2022-11-03.1e.91q.vcex

Download Exam

File Info

Exam Fortinet NSE 4 - FortiOS 7.0
Number NSE4_FGT-7.0
File Name Fortinet NSE 4 -FortiOS 7-0.CertDumps.NSE4_FGT-7.0.2022-11-03.1e.91q.vcex
Size 7.43 Mb
Posted November 03, 2022
Downloads 13

How to open VCEX & EXAM Files?

Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.

Coupon: EXAM_HUB

Discount: 20%


Demo Questions

Question 1
FortiGuard categories can be overridden and defined in different categories. To create a web rating override for home page, the override must be configured using a specific syntax.
Which two syntaxes are correct to configure web rating for the home page? (Choose two.)

  • A:
  • B:
  • C:
  • D:

Question 2
An administrator is configuring an IPsec VPN between site A and site A. The Remote Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is and the remote quick mode selector is subnet must the administrator configure for the local quick mode selector for site B?

  • A:
  • B:
  • C:
  • D:

Question 3
Which CLI command allows administrators to troubleshoot Layer 2 issues, such as an IP address conflict?

  • A: get system status
  • B: get system performance status
  • C: diagnose sys top
  • D: get system arp

Question 4
Refer to the exhibit.


The exhibit shows the IPS sensor configuration.
If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)

  • A: The sensor will allow attackers matching the NTP.Spoofed.KoD.DoS signature.
  • B: The sensor will block all attacks aimed at Windows servers.
  • C: The sensor will reset all connections that match these signatures.
  • D: The sensor will gather a packet log for all matched traffic.

Question 5
Which statement is correct regarding the inspection of some of the services available by web applications embedded in third-party websites?

  • A: The security actions applied on the web applications will also be explicitly applied on the third-party websites.
  • B: The application signature database inspects traffic only from the original web application server.
  • C: FortiGuard maintains only one signature of each web application that is unique.
  • D: FortiGate can inspect sub-application traffic regardless where it was originated.

Question 6
Refer to the exhibits.
Exhibit A.


Exhibit B.


The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) tor Facebook.
Users are given access to the Facebook web application. They can play video content hosted on Facebook but they are unable to leave reactions on videos or other types of posts.
Which part of the policy configuration must you change to resolve the issue?

  • A: The SSL inspection needs to be a deep content inspection.
  • B: Force access to Facebook using the HTTP service.
  • C: Additional application signatures are required to add to the security policy.
  • D: Add Facebook in the URL category in the security policy.

Question 7
Which two attributes are required on a certificate so it can be used as a CA certificate on SSL Inspection? (Choose two.)

  • A: The keyUsage extension must be set to keyCertSign.
  • B: The common name on the subject field must use a wildcard name.
  • C: The issuer must be a public CA.
  • D: The CA extension must be set to TRUE.

Question 8
How does FortiGate act when using SSL VPN in web mode?

  • A: FortiGate acts as an FDS server.
  • B: FortiGate acts as an HTTP reverse proxy.
  • C: FortiGate acts as DNS server.
  • D: FortiGate acts as router.

Question 9
Which two statements are correct about NGFW Policy-based mode? (Choose two.)

  • A: NGFW policy-based mode does not require the use of central source NAT policy
  • B: NGFW policy-based mode can only be applied globally and not on individual VDOMs
  • C: NGFW policy-based mode supports creating applications and web filtering categories directly in a firewall policy
  • D: NGFW policy-based mode policies support only flow inspection

Question 10
Refer to the exhibits.
Exhibit A shows system performance output.


Exhibit B shows s FortiGate configured with the default configuration of high memory usage thresholds.


Based on the system performance output, which two statements are correct? (Choose two.)

  • A: Administrators can access FortiGate only through the console port.
  • B: FortiGate has entered conserve mode.
  • C: FortiGate will start sending all files to FortiSandbox for inspection.
  • D: Administrators cannot change the configuration.



You can buy ProfExam with a 20% discount..

Get Now!


Use ProfExam Simulator to open VCEX and EXAM files
ProfExam Screen


Use VCE Exam Simulator to open VCE files