Fortinet NSE4_FGT-7.2 Exam Questions Free Practice Test

Viewing page 5 out of 6 pages

Viewing questions 41-50 out of questions

Questions # 41:

Refer to the exhibits to view the firewall policy (Exhibit A) and the antivirus profile (Exhibit B).

Question # 41

Which statement is correct if a user is unable to receive a block replacement message when downloading an infected file for the first time?

Options:

The firewall policy performs the full content inspection on the file.

The flow-based inspection is used, which resets the last packet to the user.

The volume of traffic being inspected is too high for this model of FortiGate.

The intrusion prevention security profile needs to be enabled when using flow-based inspection mode.

Expert Solution

Questions # 42:

Refer to the exhibit.

Question # 42

Based on the raw log, which two statements are correct? (Choose two.)

Options:

Traffic is blocked because Action is set to DENY in the firewall policy.

Traffic belongs to the root VDOM.

This is a security log.

Log severity is set to error on FortiGate.

Expert Solution

Questions # 43:

Which three statements explain a flow-based antivirus profile? (Choose three.)

Options:

Flow-based inspection uses a hybrid of the scanning modes available in proxy-based inspection.

If a virus is detected, the last packet is delivered to the client.

The IPS engine handles the process as a standalone.

FortiGate buffers the whole file but transmits to the client at the same time.

Flow-based inspection optimizes performance compared to proxy-based inspection.

Expert Solution

Questions # 44:

An administrator has configured two-factor authentication to strengthen SSL VPN access. Which additional best practice can an administrator implement?

Options:

Configure Source IP Pools.

Configure split tunneling in tunnel mode.

Configure different SSL VPN realms.

Configure host check .

Expert Solution

Questions # 45:

Refer to the exhibit to view the application control profile.

Question # 45

Based on the configuration, what will happen to Apple FaceTime?

Options:

Apple FaceTime will be blocked, based on the Excessive-Bandwidth filter configuration

Apple FaceTime will be allowed, based on the Apple filter configuration.

Apple FaceTime will be allowed only if the filter in Application and Filter Overrides is set to Learn

Apple FaceTime will be allowed, based on the Categories configuration.

Expert Solution

Questions # 46:

Which two settings can be separately configured per VDOM on a FortiGate device? (Choose two.)

Options:

System time

FortiGuaid update servers

Operating mode

NGFW mode

Expert Solution

Questions # 47:

FortiGate is operating in NAT mode and is configured with two virtual LAN (VLAN) subinterfaces added to the same physical interface.

In this scenario, which statement about VLAN IDs is true?

Options:

The two VLAN subinterfaces can have the same VLAN ID only if they belong to different VDOMs.

The two VLAN subinterfaces must have different VLAN IDs.

The two VLAN subinterfaces can have the same VLAN ID only if they have IP addresses in the same subnet.

The two VLAN subinterfaces can have the same VLAN ID only if they have IP addresses in different subnets.

Expert Solution

Questions # 48:

What are two benefits of flow-based inspection compared to proxy-based inspection? (Choose two.)

Options:

FortiGate uses fewer resources.

FortiGate performs a more exhaustive inspection on traffic.

FortiGate adds less latency to traffic.

FortiGate allocates two sessions per connection.

Expert Solution

Questions # 49:

Which CLI command will display sessions both from client to the proxy and from the proxy to the servers?

Options:

diagnose wad session list

diagnose wad session list | grep hook-pre&&hook-out

diagnose wad session list | grep hook=pre&&hook=out

diagnose wad session list | grep "hook=pre"&"hook=out"

Expert Solution

Questions # 50:

An administrator is running the following sniffer command:

Which three pieces of Information will be Included in me sniffer output? {Choose three.)

Options:

Interface name

Packet payload

Ethernet header

IP header

Application header

Expert Solution

Viewing page 5 out of 6 pages

Viewing questions 41-50 out of questions

Pass the Fortinet NSE4 NSE4_FGT-7.2 Questions and answers with CertsForce