Practice NSE4_FGT-7.2 Exam Online

Question 1

If the Services field is configured in a Virtual IP (VIP), which statement is true when central NAT is used?

A : The Services field prevents SNAT and DNAT from being combined in the same policy.

B : The Services field is used when you need to bundle several VIPs into VIP groups.

C : The Services field removes the requirement to create multiple VIPs for different services.

D : The Services field prevents multiple sources of traffic from using multiple services to connect to a single computer

Answer: C

Question 2

Which statement is correct regarding the use of application control for inspecting web applications?

A : Application control can identity child and parent applications, and perform different actions on them.

B : Application control signatures are organized in a nonhierarchical structure.

C : Application control does not require SSL inspection to identity web applications.

D : Application control does not display a replacement message for a blocked web application.

Answer: A

Question 3

When browsing to an internal web server using a web-mode SSL VPN bookmark, which IP address is used as the source of the HTTP request?

A : remote user’s public IP address

B : The public IP address of the FortiGate device.

C : The remote user’s virtual IP address.

D : The internal IP address of the FortiGate device.

Answer: D

Question 4

Refer to the exhibit

The global settings on a FortiGate device must be changed to align with company security policies. What does the Administrator account need to access the FortiGate global settings?

A : Enable two-factor authentication

B : Change Administrator profile

C : Change password

D : Enable restrict access to trusted hosts.

Answer: B

Question 5

Examine the IPS sensor and DoS policy configuration shown in the exhibit, then answer the question below.

When detecting attacks, which anomaly, signature, or filter will FortiGate evaluate first?

Name:	Fortinet NSE 4 - FortiOS 7.2
Exam Code:	NSE4_FGT-7.2
Certification:	NSE 4 Network Security Professional
Vendor:	Fortinet
Total Questions:	202
Last Updated:	Apr 22, 2024

Fortinet NSE4_FGT-7.2