View All NSE4_FGT-7.2 Actual Free Exam Questions May 22, 2023 Updated
Pass Authentic Fortinet NSE4_FGT-7.2 with Free Practice Tests and Exam Dumps
NEW QUESTION # 24
Refer to the exhibit.
The exhibit shows the output of a diagnose command.
What does the output reveal about the policy route?
- A. It is an ISDB policy route with an SDWAN rule.
- B. It is an SDWAN rule in policy route.
- C. It is an ISDB route in policy route.
- D. It is a regular policy route.
Answer: A
NEW QUESTION # 25
Which of the following statements is true regarding SSL VPN settings for an SSL VPN portal?
- A. By default, split tunneling is enabled.
- B. By default, FortiGate uses WINS servers to resolve names.
- C. By default, the admin GUI and SSL VPN portal use the same HTTPS port.
- D. By default, the SSL VPN portal requires the installation of a client's certificate.
Answer: C
NEW QUESTION # 26
Which statement is correct regarding the inspection of some of the services available by web applications embedded in third-party websites?
- A. FortiGate can inspect sub-application traffic regardless where it was originated.
- B. FortiGuard maintains only one signature of each web application that is unique.
- C. The security actions applied on the web applications will also be explicitly applied on the third-party websites.
- D. The application signature database inspects traffic only from the original web application server.
Answer: A
Explanation:
Reference:
https://help.fortinet.com/fortiproxy/11/Content/Admin%20Guides/FPX-AdminGuide/300_System/303d_FortiG
NEW QUESTION # 27
Which statement describes a characteristic of automation stitches?
- A. They can run multiple actions simultaneously.
- B. They can be created on any device in the fabric.
- C. They can be run only on devices in the Security Fabric.
- D. They can have one or more triggers.
Answer: A
NEW QUESTION # 28
Refer to the exhibit.
Based on the raw log, which two statements are correct? (Choose two.)
- A. Traffic belongs to the root VDOM.
- B. This is a security log.
- C. Traffic is blocked because Action is set to DENY in the firewall policy.
- D. Log severity is set to error on FortiGate.
Answer: B,C
NEW QUESTION # 29
Which two statements are true when FortiGate is in transparent mode? (Choose two.)
- A. FortiGate forwards frames without changing the MAC address.
- B. By default, all interfaces are part of the same broadcast domain.
- C. Static routes are required to allow traffic to the next hop.
- D. The existing network IP schema must be changed when installing a transparent mode.
Answer: A,B
Explanation:
Reference:
attachID=Fortigate_Transparent_Mode_Technical_Guide_FortiOS_4_0_version1.2.pdf&documentID=FD33113
NEW QUESTION # 30
Refer to the exhibit.
Given the interfaces shown in the exhibit. which two statements are true? (Choose two.)
- A. Traffic between port2 and port2-vlan1 is allowed by default.
- B. port1 is a native VLAN.
- C. port1-vlan10 and port2-vlan10 are part of the same broadcast domain.
- D. port1-vlan and port2-vlan1 can be assigned in the same VDOM or to different VDOMs.
Answer: B,D
Explanation:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-rules-about-VLAN-configuration-and-VDOM-interf
https://kb.fortinet.com/kb/viewContent.do?externalId=FD30883
NEW QUESTION # 31
Which timeout setting can be responsible for deleting SSL VPN associated sessions?
- A. SSL VPN http-request-body-timeout
- B. SSL VPN idle-timeout
- C. SSL VPN dtls-hello-timeout
- D. SSL VPN login-timeout
Answer: B
NEW QUESTION # 32
Which two protocol options are available on the CLI but not on the GUI when configuring an SD-WAN Performance SLA? (Choose two.)
- A. ping
- B. udp-echo
- C. DNS
- D. TWAMP
Answer: B,D
NEW QUESTION # 33
Which two statements are correct about NGFW Policy-based mode? (Choose two.)
- A. NGFW policy-based mode can only be applied globally and not on individual VDOMs
- B. NGFW policy-based mode policies support only flow inspection
- C. NGFW policy-based mode supports creating applications and web filtering categories directly in a firewall policy
- D. NGFW policy-based mode does not require the use of central source NAT policy
Answer: B,C
NEW QUESTION # 34
Refer to the exhibit.
A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, which configuration change will bring phase 2 up?
- A. On HQ-FortiGate, set Encryption to AES256.
- B. On Remote-FortiGate, set Seconds to 43200.
- C. On HQ-FortiGate, enable Auto-negotiate.
- D. On HQ-FortiGate, enable Diffie-Hellman Group 2.
Answer: A
NEW QUESTION # 35
Refer to the exhibits.
The SSL VPN connection fails when a user attempts to connect to it. What should the user do to successfully connect to SSL VPN?
- A. Change the SSL VPN port on the client.
- B. Change the SSL VPN portal to the tunnel.
- C. Change the idle-timeout.
- D. Change the Server IP address.
Answer: A
NEW QUESTION # 36
An administrator needs to configure VPN user access for multiple sites using the same soft FortiToken. Each site has a FortiGate VPN gateway. What must an administrator do to achieve this objective?
- A. The administrator must use a FortiAuthenticator device
- B. The administrator can use a third-party radius OTP server.
- C. The administrator can register the same FortiToken on more than one FortiGate.
- D. The administrator must use the user self-registration server.
Answer: A
NEW QUESTION # 37
An administrator configures FortiGuard servers as DNS servers on FortiGate using default settings.
What is true about the DNS connection to a FortiGuard server?
- A. It uses DNS over HTTPS.
- B. It uses UDP 53.
- C. It uses DNS overTLS.
- D. It uses UDP 8888.
Answer: B
NEW QUESTION # 38
FortiGuard categories can be overridden and defined in different categories. To create a web rating override for example.com home page, the override must be configured using a specific syntax.
Which two syntaxes are correct to configure web rating for the home page? (Choose two.)
- A. www.example.com/index.html
- B. www.example.com:443
- C. www.example.com
- D. example.com
Answer: C,D
Explanation:
When using FortiGuard category filtering to allow or block access to a website, one option is to make a web rating override and define the website in a different category. Web ratings are only for host names - no URLs or wildcard characters are allowed.
OK: google.com or www.google.com
NO OK: www.google.com/index.html or google.*
FortiGate_Security_6.4 page 384
When using FortiGuard category filtering to allow or block access to a website, one option is to make a web rating override and define the website in a different category. Web ratings are only for host names-- "no URLs or wildcard characters are allowed".
NEW QUESTION # 39
Refer to the exhibit.
The Root and To_Internet VDOMs are configured in NAT mode. The DMZ and Local VDOMs are configured in transparent mode.
The Root VDOM is the management VDOM. The To_Internet VDOM allows LAN users to access the internet. The To_Internet VDOM is the only VDOM with internet access and is directly connected to ISP modem .
With this configuration, which statement is true?
- A. Inter-VDOM links are required to allow traffic between the Local and Root VDOMs.
- B. A static route is required on the To_Internet VDOM to allow LAN users to access the internet.
- C. Inter-VDOM links are not required between the Root and To_Internet VDOMs because the Root VDOM is used only as a management VDOM.
- D. Inter-VDOM links are required to allow traffic between the Local and DMZ VDOMs.
Answer: A
NEW QUESTION # 40
......
New NSE4_FGT-7.2 Exam Questions Real Fortinet Dumps: https://www.fast2test.com/NSE4_FGT-7.2-premium-file.html
Course 2023 NSE4_FGT-7.2 Test Prep Training Practice Exam Download: https://drive.google.com/open?id=1bOphIOksh4UhqjRwFdDruvdJa0DyNe1n