Fortinet NSE 4 - FortiOS 7.2 - NSE4_FGT-7.2 Exam Practice Test

Question 1

Refer to the exhibit.

Which contains a session list output. Based on the information shown in the exhibit, which statement is true?

A. Port block allocation IP pool is used in the firewall policy.

B. Destination NAT is disabled in the firewall policy.

C. One-to-one NAT IP pool is used in the firewall policy.

D. Overload NAT IP pool is used in the firewall policy.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

Which three security features require the intrusion prevention system (IPS) engine to function? (Choose three.)

A. DNS filter

B. Web application firewall

C. Antivirus in flow-based inspection

D. Web filter in flow-based inspection

E. Application control

Correct Answer: C,D,E

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

Refer to the exhibits to view the firewall policy (Exhibit A) and the antivirus profile (Exhibit B).

Which statement is correct if a user is unable to receive a block replacement message when downloading an infected file for the first time?

A. The flow-based inspection is used, which resets the last packet to the user.

B. The volume of traffic being inspected is too high for this model of FortiGate.

C. The firewall policy performs the full content inspection on the file.

D. The intrusion prevention security profile needs to be enabled when using flow-based inspection mode.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

On FortiGate, which type of logs record information about traffic directly to and from the FortiGate management IP addresses?

A. Forward traffic logs

B. Security logs

C. System event logs

D. Local traffic logs

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

Refer to the exhibits.

Exhibit A shows system performance output. Exhibit B shows a FortiGate configured with the default configuration of high memory usage thresholds. Based on the system performance output, which two statements are correct? (Choose two.)

A. Administrators can access FortiGate only through the console port.

B. FortiGate has entered conserve mode.

C. FortiGate will start sending all files to FortiSandbox for inspection.

D. Administrators cannot change the configuration.

Correct Answer: B,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

Refer to the exhibits.

An administrator creates a new address object on the root FortiGate (Local-FortiGate) in the security fabric. After synchronization, this object is not available on the downstream FortiGate (ISFW).
What must the administrator do to synchronize the address object?

A. Change the csf setting on ISFW (downstream) to set authorization-request-type certificate.

B. Change the csf setting on Local-FortiGate (root) to set fabric-object-unification default.

C. Change the csf setting on both devices to set downstream-access enable.

D. Change the csf setting on ISFW (downstream) to set configuration-sync local.

Correct Answer: C

Question 7

Examine the exhibit, which contains a virtual IP and firewall policy configuration.

The WAN (port1) interface has the IP address 10.200. 1. 1/24. The LAN (port2) interface has the IP address 10.0. 1.254/24.
The first firewall policy has NAT enabled on the outgoing interface address. The second firewall policy is configured with a VIP as the destination address. Which IP address will be used to source NAT the Internet traffic coming from a workstation with the IP address 10.0. 1. 10/24?

A. 10.200. 1. 10

B. 10.200. 1. 1

C. Any available IP address in the WAN (port1) subnet 10.200. 1.0/24

D. 10.0. 1.254

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 8

What are two scanning techniques supported by FortiGate? (Choose two.)

A. Machine learning scan

B. Trojan scan

C. Antivirus scan

D. Ransomware scan

Correct Answer: A,C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 9

An administrator has configured the following settings:

What are the two results of this configuration? (Choose two.)

A. A session for denied traffic is created.

B. The number of logs generated by denied traffic is reduced.

C. Denied users are blocked for 30 minutes.

D. Device detection on all interfaces is enforced for 30 minutes.

Correct Answer: A,B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 10

Which certificate value can FortiGate use to determine the relationship between the issuer and the certificate?

A. Subject value

B. Subject Key Identifier value

C. SMMIE Capabilities value

D. Subject Alternative Name value

Correct Answer: B

Question 11

What is a reason for triggering IPS fail open?

A. The IPS socket buffer is full and the IPS engine cannot process additional packets.

B. The IPS engine cannot decode a packet.

C. The IPS engine is upgraded.

D. The administrator enabled NTurbo acceleration.

Correct Answer: A

Fortinet NSE 4 - FortiOS 7.2 - NSE4_FGT-7.2 Exam Practice Test

Latest Update

Useful Links

Contact Us