Online NSE4_FGT-7.2 Exam Dumps Help You Build Confidence

1. Refer to the exhibit.





The exhibit displays the output of the CLI command: diagnose sys ha dump-by vcluster.

Which two statements are true? (Choose two.)

2. An administrator has configured a strict RPF check on FortiGate.

Which statement is true about the strict RPF check?

3. Examine this output from a debug flow:





Why did the FortiGate drop the packet?

4. Refer to the exhibits.

The exhibits show the firewall policies and the objects used in the firewall policies.

The administrator is using the Policy Lookup feature and has entered the search criteria shown in the exhibit.









Which policy will be highlighted, based on the input criteria?

5. Which three methods are used by the collector agent for AD polling? (Choose three.)

6. Which CLI command will display sessions both from client to the proxy and from the proxy to the servers?

7. A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 fails to come up. The administrator has also re-entered the pre-shared key on both FortiGate devices to make sure they match.





Based on the phase 1 configuration and the diagram shown in the exhibit, which two configuration changes will bring phase 1 up? (Choose two.)

8. Which statement about the IP authentication header (AH) used by IPsec is true?

9. CORRECT TEXT

Which two policies must be configured to allow traffic on a policy-based next-generation firewall (NGFW) FortiGate? (Choose two.)

10. Which statement regarding the firewall policy authentication timeout is true?

11. Which two statements are true when FortiGate is in transparent mode? (Choose two.)

12. Refer to the exhibit.





Given the interfaces shown in the exhibit. which two statements are true? (Choose two.)

13. An administrator is configuring an Ipsec between site A and siteB. The Remotes Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192. 16. 1.0/24 and the remote quick mode selector is 192. 16.2.0/24.

How must the administrator configure the local quick mode selector for site B?

14. 1.Refer to the exhibit.





Based on the raw log, which two statements are correct? (Choose two.)

15. Which scanning technique on FortiGate can be enabled only on the CLI?

16. Which two protocols are used to enable administrator access of a FortiGate device? (Choose two.)

17. Which two protocol options are available on the CLI but not on the GUI when configuring an SD-WAN Performance SLA? (Choose two.)

18. Which of the following SD-WAN load balancing method use interface weight value to distribute traffic? (Choose two.)

19. Which two statements are true about the RPF check? (Choose two.)

20. If the Issuer and Subject values are the same in a digital certificate, which type of entity was the certificate issued to?

21. Refer to the exhibit.

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices.

The administrator has determined that phase 1 status is up, but phase 2 fails to come up.





Based on the phase 2 configuration shown in the exhibit, which configuration change will bring phase 2 up?

22. An administrator configures FortiGuard servers as DNS servers on FortiGate using default settings.

What is true about the DNS connection to a FortiGuard server?

23. Which two configuration settings are synchronized when FortiGate devices are in an active-active HA cluster? (Choose two.)

24. The HTTP inspection process in web filtering follows a specific order when multiple features are enabled in the web filter profile.

What order must FortiGate use when the web filter profile has features enabled, such as safe search?

25. Refer to the exhibit.





Given the security fabric topology shown in the exhibit, which two statements are true? (Choose two.)

26. Refer to the exhibit.









The exhibit contains the configuration for an SD-WAN Performance SLA, as well as the output of diagnose sys virtual-wan-link health-check.

Which interface will be selected as an outgoing interface?

27. Refer to the exhibit.





The exhibit shows the output of a diagnose command.

What does the output reveal about the policy route?

28. An administrator wants to configure Dead Peer Detection (DPD) on IPSEC VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when no traffic is observed in the tunnel.

Which DPD mode on FortiGate will meet the above requirement?

29. Which two types of traffic are managed only by the management VDOM? (Choose two.)

30. Refer to exhibit.





An administrator configured the web filtering profile shown in the exhibit to block access to all social networking sites except Twitter. However, when users try to access twitter.com, they are redirected to a FortiGuard web filtering block page.

Based on the exhibit, which configuration change can the administrator make to allow Twitter while blocking all other social networking sites?

31. An administrator has configured two-factor authentication to strengthen SSL VPN access.

Which additional best practice can an administrator implement?

32. By default, FortiGate is configured to use HTTPS when performing live web filtering with FortiGuard servers.

Which CLI command will cause FortiGate to use an unreliable protocol to communicate with FortiGuard servers for live web filtering?

33. Refer to the web filter raw logs.





Based on the raw logs shown in the exhibit, which statement is correct?

34. Which three statements are true regarding session-based authentication? (Choose three.)

35. Consider the topology:

Application on a Windows machine <--{SSL VPN} -->FGT--> Telnet to Linux server.

An administrator is investigating a problem where an application establishes a Telnet session to a Linux server over the SSL VPN through FortiGate and the idle session times out after about 90 minutes. The administrator would like to increase or disable this timeout.

The administrator has already verified that the issue is not caused by the application or Linux server. This issue does not happen when the application establishes a Telnet connection to the Linux server directly on the LAN.

What two changes can the administrator make to resolve the issue without affecting services running through FortiGate? (Choose two.)

36. Refer to the exhibit.





The exhibit shows the IPS sensor configuration.

If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)

37. In an explicit proxy setup, where is the authentication method and database configured?

38. An administrator has configured outgoing Interface any in a firewall policy.

Which statement is true about the policy list view?

39. An administrator observes that the port1 interface cannot be configured with an IP address.

What can be the reasons for that? (Choose three.)

40. Refer to the FortiGuard connection debug output.





Based on the output shown in the exhibit, which two statements are correct? (Choose two.)

41. An administrator does not want to report the logon events of service accounts to FortiGate.

What setting on the collector agent is required to achieve this?

42. An administrator is running the following sniffer command:

Which three pieces of Information will be Included in me sniffer output? {Choose three.)

43. Which CLI command will display sessions both from client to the proxy and from the proxy to the servers?

44. Refer to the exhibits.

Exhibit A shows a network diagram. Exhibit B shows the firewall policy configuration and a VIP object configuration.

The WAN (port1) interface has the IP address 10.200.1.1/24.

The LAN (port3) interface has the IP address 10.0.1.254/24.









If the host 10.200.3.1 sends a TCP SYN packet on port 10443 to 10.200.1.10, what will the source address, destination address, and destination port of the packet be, after FortiGate forwards the packet to the destination?

45. Which statement correctly describes the use of reliable logging on FortiGate?

46. Refer to the exhibits.









The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) for Facebook.

Users are given access to the Facebook web application. They can play video content hosted on Facebook but they are unable to leave reactions on videos or other types of posts.

Which part of the policy configuration must you change to resolve the issue?

47. Refer to the exhibit.





An administrator is running a sniffer command as shown in the exhibit.

Which three pieces of information are included in the sniffer output? (Choose three.)

48. Which two statements are correct about SLA targets? (Choose two.)