[Feb 10, 2023] Today Updated NSE4_FGT-7.0 Exam Dumps Actual Questions [Q43-Q63]

4.3/5 - (7 votes)

[Feb 10, 2023] Today Updated NSE4_FGT-7.0 Exam Dumps Actual Questions

NSE4_FGT-7.0 exam dumps with real Fortinet questions and answers

NEW QUESTION 43
Which statements are true regarding firewall policy NAT using the outgoing interface IP address with fixed port disabled? (Choose two.)

This is known as many-to-one NAT.

Source IP is translated to the outgoing interface IP.

Connections are tracked using source port and source MAC address.

Port address translation is not used.

NEW QUESTION 44
An administrator has a requirement to keep an application session from timing out on port 80. What two changes can the administrator make to resolve the issue without affecting any existing services running through FortiGate? (Choose two.)

Create a new firewall policy with the new HTTP service and place it above the existing HTTP policy.

Create a new service object for HTTP service and set the session TTL to never

Set the TTL value to never under config system-ttl

Set the session TTL on the HTTP policy to maximum

NEW QUESTION 45
Which three CLI commands can you use to troubleshoot Layer 3 issues if the issue is in neither the physical layer nor the link layer? (Choose three.)

diagnose sys top

execute ping

execute traceroute

diagnose sniffer packet any

get system arp

NEW QUESTION 46
When browsing to an internal web server using a web-mode SSL VPN bookmark, which IP address is used as the source of the HTTP request?

remote user’s public IP address

The public IP address of the FortiGate device.

The remote user’s virtual IP address.

The internal IP address of the FortiGate device.

NEW QUESTION 47
In which two ways can RPF checking be disabled? (Choose two )

Enable anti-replay in firewall policy.

Disable the RPF check at the FortiGate interface level for the source check

Enable asymmetric routing.

Disable strict-arc-check under system settings.

NEW QUESTION 48
Which two statements are true about collector agent advanced mode? (Choose two.)

Advanced mode uses Windows convention-NetBios: DomainUsername.

FortiGate can be configured as an LDAP client and group filters can be configured on FortiGate

Advanced mode supports nested or inherited groups

Security profiles can be applied only to user groups, not individual users.

NEW QUESTION 49
Which statement about video filtering on FortiGate is true?

Full SSL Inspection is not required.

It is available only on a proxy-based firewall policy.

It inspects video files hosted on file sharing services.

Video filtering FortiGuard categories are based on web filter FortiGuard categories.

NEW QUESTION 50
Refer to the exhibit showing a debug flow output.

Which two statements about the debug flow output are correct? (Choose two.)

The debug flow is of ICMP traffic.

A firewall policy allowed the connection.

A new traffic session is created.

The default route is required to receive a reply.

NEW QUESTION 51
Which statement about video filtering on FortiGate is true?

Full SSL Inspection is not required.

It is available only on a proxy-based firewall policy.

It inspects video files hosted on file sharing services.

Video filtering FortiGuard categories are based on web filter FortiGuard categories.

NEW QUESTION 52
Which two protocols are used to enable administrator access of a FortiGate device? (Choose two.)

SSH

HTTPS

FTM

FortiTelemetry

NEW QUESTION 53
Examine this FortiGate configuration:

How does the FortiGate handle web proxy traffic coming from the IP address 10.2.1.200 that requires authorization?

It always authorizes the traffic without requiring authentication.

It drops the traffic.

It authenticates the traffic using the authentication scheme SCHEME2.

It authenticates the traffic using the authentication scheme SCHEME1.

NEW QUESTION 54
FortiGate is configured as a policy-based next-generation firewall (NGFW) and is applying web filtering and application control directly on the security policy.
Which two other security profiles can you apply to the security policy? (Choose two.)

Antivirus scanning

File filter

DNS filter

Intrusion prevention

NEW QUESTION 55
If the Services field is configured in a Virtual IP (VIP), which statement is true when central NAT is used?

The Services field prevents SNAT and DNAT from being combined in the same policy.

The Services field is used when you need to bundle several VIPs into VIP groups.

The Services field removes the requirement to create multiple VIPs for different services.

The Services field prevents multiple sources of traffic from using multiple services to connect to a single computer.

NEW QUESTION 56
Refer to the exhibit.

Given the routing database shown in the exhibit, which two statements are correct? (Choose two.)

The port3 default route has the highest distance.

The port3 default route has the lowest metric.

There will be eight routes active in the routing table.

The port1 and port2 default routes are active in the routing table.

NEW QUESTION 57
Which three methods are used by the collector agent for AD polling? (Choose three.)

FortiGate polling

NetAPI

Novell API

WMI

WinSecLog

NEW QUESTION 58
Which engine handles application control traffic on the next-generation firewall (NGFW) FortiGate?

Antivirus engine

Intrusion prevention system engine

Flow engine

Detection engine

NEW QUESTION 59
Refer to the exhibit to view the application control profile.

Users who use Apple FaceTime video conferences are unable to set up meetings.
In this scenario, which statement is true?

Apple FaceTime belongs to the custom monitored filter.

The category of Apple FaceTime is being monitored.

Apple FaceTime belongs to the custom blocked filter.

The category of Apple FaceTime is being blocked.

NEW QUESTION 60
Refer to the exhibit, which contains a static route configuration.

An administrator created a static route for Amazon Web Services.
What CLI command must the administrator use to view the route?

get router info routing-table all

get internet service route list

get router info routing-table database

diagnose firewall proute list

NEW QUESTION 61
Which two statements are true about the RPF check? (Choose two.)

The RPF check is run on the first sent packet of any new session.

The RPF check is run on the first reply packet of any new session.

The RPF check is run on the first sent and reply packet of any new session.

RPF is a mechanism that protects FortiGate and your network from IP spoofing attacks.

NEW QUESTION 62
What is the primary FortiGate election process when the HA override setting is disabled?

Connected monitored ports > System uptime > Priority > FortiGate Serial number

Connected monitored ports > HA uptime > Priority > FortiGate Serial number

Connected monitored ports > Priority > HA uptime > FortiGate Serial number

Connected monitored ports > Priority > System uptime > FortiGate Serial number

NEW QUESTION 63
Which two attributes are required on a certificate so it can be used as a CA certificate on SSL Inspection? (Choose two.)

The keyUsage extension must be set to keyCertSign.

The common name on the subject field must use a wildcard name.

The issuer must be a public CA.

The CA extension must be set to TRUE.

Exam Sure Pass Fortinet Certification with NSE4_FGT-7.0 exam questions: https://www.validbraindumps.com/NSE4_FGT-7.0-exam-prep.html

Free valid test braindumps

[Feb 10, 2023] Today Updated NSE4_FGT-7.0 Exam Dumps Actual Questions [Q43-Q63]

Leave a Reply Cancel reply