Free Fortinet NSE4_FGT-7.2 Exam Dumps and NSE4

Question No: 1

MultipleChoice

Which two policies must be configured to allow traffic on a policy-based next-generation firewall (NGFW) FortiGate? (Choose two.)

Options

CSecurity policy

DSSL inspection and authentication policy

Question No: 2

MultipleChoice

You have enabled logging on your FortiGate device for Event logs and all Security logs, and you have set up logging to use the FortiGate local disk . What is the default behavior when the local disk is full?

Options

ALogs are overwritten and the only warning is issued when log disk usage reaches the threshold of 95%.

BNo new log is recorded until you manually clear logs from the local disk .

CLogs are overwritten and the first warning is issued when log disk usage reaches the threshold of 75%.

DNo new log is recorded after the warning is issued when log disk usage reaches the threshold of 95%.

Question No: 3

MultipleChoice

A FortiGate is operating in NAT mode and configured with two virtual LAN (VLAN) sub interfaces added to the physical interface. Which statements about the VLAN sub interfaces can have the same VLAN ID, only if they have IP addresses in different subnets.

Options

AThe two VLAN sub interfaces can have the same VLAN ID, only if they have IP addresses in different subnets.

BThe two VLAN sub interfaces must have different VLAN IDs.

CThe two VLAN sub interfaces can have the same VLAN ID, only if they belong to different VDOMs.

DThe two VLAN sub interfaces can have the same VLAN ID, only if they have IP addresses in the same subnet.

Question No: 4

MultipleChoice

Refer to the FortiGuard connection debug output.

Based on the output shown in the exhibit, which two statements are correct? (Choose two.)

Options

AA local FortiManager is one of the servers FortiGate communicates with.

BOne server was contacted to retrieve the contract information.

CThere is at least one server that lost packets consecutively.

DFortiGate is using default FortiGuard communication settings.

Question No: 5

MultipleChoice

Which statement is correct regarding the inspection of some of the services available by web applications embedded in third-party websites?

Options

AThe security actions applied on the web applications will also be explicitly applied on the third-party websites.

BThe application signature database inspects traffic only from the original web application server.

CFortiGuard maintains only one signature of each web application that is unique.

DFortiGate can inspect sub-application traffic regardless where it was originated.

Question No: 6

MultipleChoice

Refer to the exhibits.

Exhibit A.

Exhibit B.

An administrator creates a new address object on the root FortiGate (Local-FortiGate) in the security fabric. After synchronization, this object is not available on the downstream FortiGate (ISFW).

What must the administrator do to synchronize the address object?

Options

AChange the csf setting on Local-FortiGate (root) to set configuration-sync local.

BChange the csf setting on ISFW (downstream) to set configuration-sync local.

CChange the csf setting on Local-FortiGate (root) to set fabric-object-unification default.

DChange the csf setting on ISFW (downstream) to set fabric-object-unification default.

Question No: 7

MultipleChoice

Refer to the web filter raw logs.

Based on the raw logs shown in the exhibit, which statement is correct?

Options

ASocial networking web filter category is configured with the action set to authenticate.

BThe action on firewall policy ID 1 is set to warning.

CAccess to the social networking web filter category was explicitly blocked to all users.

DThe name of the firewall policy is all_users_web.