Easily To Pass New Fortinet NSE4_FGT-7.0 Dumps with 175 Questions [Q76-Q90]

5/5 - (1 vote)

Easily To Pass New Fortinet NSE4_FGT-7.0 Dumps with 175 Questions

Latest NSE4_FGT-7.0 Study Guides 2022 – With Test Engine PDF

NEW QUESTION 76
Which two statements are correct regarding FortiGate FSSO agentless polling mode? (Choose two.)

FortiGate points the collector agent to use a remote LDAP server.

FortiGate uses the AD server as the collector agent.

FortiGate uses the SMB protocol to read the event viewer logs from the DCs.

FortiGate queries AD by using the LDAP to retrieve user group information.

Fortigate Infrastructure 7.0 Study Guide P.272-273
https://kb.fortinet.com/kb/documentLink.do?externalID=FD47732

NEW QUESTION 77
An administrator has configured outgoing Interface any in a firewall policy. Which statement is true about the policy list view?

Policy lookup will be disabled.

By Sequence view will be disabled.

Search option will be disabled

Interface Pair view will be disabled.

https://kb.fortinet.com/kb/documentLink.do?externalID=FD47821

NEW QUESTION 78
An organization’s employee needs to connect to the office through a high-latency internet connection.
Which SSL VPN setting should the administrator adjust to prevent the SSL VPN negotiation failure?

Change the session-ttl.

Change the login timeout.

Change the idle-timeout.

Change the udp idle timer.

NEW QUESTION 79
What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?

It limits the scanning of application traffic to the DNS protocol only.

It limits the scanning of application traffic to use parent signatures only.

It limits the scanning of application traffic to the browser-based technology category only.

It limits the scanning of application traffic to the application category only.

NEW QUESTION 80
An administrator is configuring an IPsec VPN between site A and site B.
The Remote Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192.168.1.0/24 and the remote quick mode selector is 192.168.2.0/24.
Which subnet must the administrator configure for the local quick mode selector for site B?

192.168.1.0/24

192.168.0.0/24

192.168.2.0/24

192.168.3.0/24

NEW QUESTION 81
Examine this PAC file configuration.

Which of the following statements are true? (Choose two.)

Browsers can be configured to retrieve this PAC file from the FortiGate.

Any web request to the 172.25.120.0/24 subnet is allowed to bypass the proxy.

All requests not made to Fortinet.com or the 172.25.120.0/24 subnet, have to go through altproxy.corp.com: 8060.

Any web request fortinet.com is allowed to bypass the proxy.

NEW QUESTION 82
Why does FortiGate Keep TCP sessions in the session table for several seconds, even after both sides (client and server) have terminated the session?

To allow for out-of-order packets that could arrive after the FIN/ACK packets

To finish any inspection operations

To remove the NAT operation

To generate logs

TCP provides the ability for one end of a connection to terminate its output while still receiving data from the other end. This is called a half-close. FortiGate unit implements a specific timer before removing an entry in the firewall session table.

NEW QUESTION 83
Examine the network diagram shown in the exhibit, then answer the following question:

Which one of the following routes is the best candidate route for FGT1 to route traffic from the Workstation to the Web server?

172.16.0.0/16 [50/0] via 10.4.200.2, port2 [5/0]

0.0.0.0/0 [20/0] via 10.4.200.2, port2

10.4.200.0/30 is directly connected, port2

172.16.32.0/24 is directly connected, port1

NEW QUESTION 84
Which two VDOMs are the default VDOMs created when FortiGate is set up in split VDOM mode? (Choose two.)

FG-traffic

Mgmt

FG-Mgmt

Root

NEW QUESTION 85
Which two statements about FortiGate FSSO agentless polling mode are true? (Choose two.)

FortiGate uses the AD server as the collector agent.

FortiGate uses the SMB protocol to read the event viewer logs from the DCs.

FortiGate does not support workstation check.

FortiGate directs the collector agent to use a remote LDAP server.

NEW QUESTION 86
Refer to the exhibit.

Which contains a session diagnostic output. Which statement is true about the session diagnostic output?

The session is in SYN_SENT state.

The session is in FIN_ACK state.

The session is in FTN_WAIT state.

The session is in ESTABLISHED state.

Indicates TCP (proto=6) session in SYN_SENT state (proto=state=2) https://kb.fortinet.com/kb/viewContent.do?externalId=FD30042

NEW QUESTION 87
Refer to the exhibit.

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up. but phase 2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, what configuration change will bring phase 2 up?

On HQ-FortiGate, enable Auto-negotiate.

On Remote-FortiGate, set Seconds to 43200.

On HQ-FortiGate, enable Diffie-Hellman Group 2.

On HQ-FortiGate, set Encryption to AES256.

Reference:
Encryption and authentication algorithm needs to match in order for IPSEC be successfully established.

NEW QUESTION 88
Which two statements are true when FortiGate is in transparent mode? (Choose two.)

By default, all interfaces are part of the same broadcast domain.

The existing network IP schema must be changed when installing a transparent mode.

Static routes are required to allow traffic to the next hop.

FortiGate forwards frames without changing the MAC address.

Reference:
attachID=Fortigate_Transparent_Mode_Technical_Guide_FortiOS_4_0_version1.2.pdf&documentID=FD33113

NEW QUESTION 89
Which statement regarding the firewall policy authentication timeout is true?

It is an idle timeout. The FortiGate considers a user to be “idle” if it does not see any packets coming from the user’s source IP.

It is a hard timeout. The FortiGate removes the temporary policy for a user’s source IP address after this timer has expired.

It is an idle timeout. The FortiGate considers a user to be “idle” if it does not see any packets coming from the user’s source MAC.

It is a hard timeout. The FortiGate removes the temporary policy for a user’s source MAC address after this timer has expired.

NEW QUESTION 90
When configuring a firewall virtual wire pair policy, which following statement is true?

Any number of virtual wire pairs can be included, as long as the policy traffic direction is the same.

Only a single virtual wire pair can be included in each policy.

Any number of virtual wire pairs can be included in each policy, regardless of the policy traffic direction settings.

Exactly two virtual wire pairs need to be included in each policy.

Loading …

Fortinet NSE4_FGT-7.0 Exam Syllabus Topics:

Topic	Details
Topic 1	Configure FortiGate interfaces or VDOMs to operate as Layer 2 devices Diagnose resource and connectivity problems
Topic 2	Describe and configure VDOMs to split a FortiGate into multiple virtual devices Configure application control to monitor and control network applications
Topic 3	Configure and route packets using static and policy-based routes Identify and configure different operation modes for an FGCP HA cluster
Topic 4	Configure SD-WAN to load balance traffic between multiple WAN links effectively Identify and configure how firewall policy NAT and central NAT works
Topic 5	Configure IPS, DoS, and WAF to protect the network from hacking and DDoS attacks Configure log settings and diagnose problems using the logs
Topic 6	Configure and implement different SSL-VPN modes to provide secure access to the private network Implement the Fortinet Security Fabric