最新的Fortinet NSE 4 - FortiOS 7.6 Administrator - NSE4_FGT_AD-7.6免費考試真題
An administrator has configured the following settings.
config system settings
set ses-denied-traffic enable
end
config system global
set block-session-timer 30
end
What are the two results of this configuration? (Choose two.)
config system settings
set ses-denied-traffic enable
end
config system global
set block-session-timer 30
end
What are the two results of this configuration? (Choose two.)
正確答案: B,C
說明：（僅 Fast2test 成員可見）
Refer to the exhibit.
An administrator has configured an Application Overrides for the ABC.Com application signature and set the Action to Allow This application control profile is then applied to a firewall policy that is scanning all outbound traffic. Logging is enabled in the firewall policy. To test the configuration, the administrator accessed the ABC.Com web site several times.
Why are there no logs generated under security logs for ABC.Com?
An administrator has configured an Application Overrides for the ABC.Com application signature and set the Action to Allow This application control profile is then applied to a firewall policy that is scanning all outbound traffic. Logging is enabled in the firewall policy. To test the configuration, the administrator accessed the ABC.Com web site several times.
Why are there no logs generated under security logs for ABC.Com?
正確答案: B
說明：（僅 Fast2test 成員可見）
Refer to the exhibit.
An SD-WAN zone configuration on the FortiGate GUI is shown. Based on the exhibit, which statement is true?
An SD-WAN zone configuration on the FortiGate GUI is shown. Based on the exhibit, which statement is true?
正確答案: B
說明：（僅 Fast2test 成員可見）
Refer to the exhibit.
What would be the impact of these settings on the Server certificate SNI check configuration on FortiGate?
What would be the impact of these settings on the Server certificate SNI check configuration on FortiGate?
正確答案: A
說明：（僅 Fast2test 成員可見）
Exhibits:
You are asked to implement an antivirus profile for files downloaded through FTP, HTTP, and HTTPS.
While testing, you are successful with HTTP and FTP protocols, but FortiGate does not block the file download over HTTPS.
What could be the cause?
You are asked to implement an antivirus profile for files downloaded through FTP, HTTP, and HTTPS.
While testing, you are successful with HTTP and FTP protocols, but FortiGate does not block the file download over HTTPS.
What could be the cause?
正確答案: A
說明：（僅 Fast2test 成員可見）
A network administrator is reviewing firewall policies in both Interface Pair View and By Sequence View.
The policies appear in a different order in each view. Why is the policy order different in these two views?
The policies appear in a different order in each view. Why is the policy order different in these two views?
正確答案: A
說明：（僅 Fast2test 成員可見）
Refer to the exhibit.
A routing table is shown
An administrator wants to create a new static route so the traffic to the subnet 172.20.1.0/24 is routed through port2 only. What are the two criteria that the administrator can use to achieve this objective? (Choose two.)
A routing table is shown
An administrator wants to create a new static route so the traffic to the subnet 172.20.1.0/24 is routed through port2 only. What are the two criteria that the administrator can use to achieve this objective? (Choose two.)
正確答案: C,D
說明：（僅 Fast2test 成員可見）
How does FortiExtender connect to FortiSASE in a site-based, remote internet access method?
正確答案: C
說明：（僅 Fast2test 成員可見）
Which two features of IPsec IKEv1 authentication are supported by FortiGate? (Choose two.)
正確答案: A,C
說明：（僅 Fast2test 成員可見）
Which three methods are used by the collector agent for AD polling? (Choose three answers)
正確答案: C,D,E
說明：（僅 Fast2test 成員可見）