最新的Fortinet NSE 4 - FortiOS 7.0 - NSE4_FGT-7.0免費考試真題
In which two ways can RPF checking be disabled? (Choose two )
正確答案: A,C
What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?
正確答案: A
Which type of logs on FortiGate record information about traffic directly to and from the FortiGate management IP addresses?
正確答案: B
Refer to the exhibit.
In the network shown in the exhibit, the web client cannot connect to the HTTP web server. The administrator runs the FortiGate built-in sniffer and gets the output as shown in the exhibit.
What should the administrator do next to troubleshoot the problem?
In the network shown in the exhibit, the web client cannot connect to the HTTP web server. The administrator runs the FortiGate built-in sniffer and gets the output as shown in the exhibit.
What should the administrator do next to troubleshoot the problem?
正確答案: C
Refer to the exhibit to view the application control profile.
Users who use Apple FaceTime video conferences are unable to set up meetings.
In this scenario, which statement is true?
Users who use Apple FaceTime video conferences are unable to set up meetings.
In this scenario, which statement is true?
正確答案: B
說明：（僅 Fast2test 成員可見）
Which two statements about IPsec authentication on FortiGate are correct? (Choose two.)
正確答案: C,D
Which statement about the IP authentication header (AH) used by IPsec is true?
正確答案: A
Refer to the exhibit to view the application control profile.
Based on the configuration, what will happen to Apple FaceTime?
Based on the configuration, what will happen to Apple FaceTime?
正確答案: D
Refer to the exhibits.
Exhibit A.
Exhibit B.
An administrator creates a new address object on the root FortiGate (Local-FortiGate) in the security fabric. After synchronization, this object is not available on the downstream FortiGate (ISFW).
What must the administrator do to synchronize the address object?
Exhibit A.
Exhibit B.
An administrator creates a new address object on the root FortiGate (Local-FortiGate) in the security fabric. After synchronization, this object is not available on the downstream FortiGate (ISFW).
What must the administrator do to synchronize the address object?
正確答案: A
Examine this FortiGate configuration:
Examine the output of the following debug command:
Based on the diagnostic outputs above, how is the FortiGate handling the traffic for new sessions that require inspection?
Examine the output of the following debug command:
Based on the diagnostic outputs above, how is the FortiGate handling the traffic for new sessions that require inspection?
正確答案: D
Which two statements about SSL VPN between two FortiGate devices are true? (Choose two.)
正確答案: A,D
說明：（僅 Fast2test 成員可見）
Which two statements about FortiGate FSSO agentless polling mode are true? (Choose two.)
正確答案: B,D
If Internet Service is already selected as Source in a firewall policy, which other configuration objects can be added to the Source filed of a firewall policy?
正確答案: B
說明：（僅 Fast2test 成員可見）
What is the primary FortiGate election process when the HA override setting is disabled?
正確答案: A
說明：（僅 Fast2test 成員可見）