Fortinet NSE4_FGT-7.2 Online Practice Questions and Exam Preparation

Fortinet NSE4_FGT-7.2 Online Questions & Answers

• Question 181:

  Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides (client and server) have terminated the session?

  A. To remove the NAT operation.
  B. To generate logs
  C. To finish any inspection operations.
  D. To allow for out-of-order packets that could arrive after the FIN/ACK packets.
  D. To allow for out-of-order packets that could arrive after the FIN/ACK packets.

  ---

  Explanation/Reference:

• Question 182:

  An administrator has configured a strict RPF check on FortiGate. Which statement is true about the strict RPF check?

  A. The strict RPF check is run on the first sent and reply packet of any new session.
  B. Strict RPF checks the best route back to the source using the incoming interface.
  C. Strict RPF checks only for the existence of at least one active route back to the source using the incoming interface.
  D. Strict RPF allows packets back to sources with all active routes.
  B. Strict RPF checks the best route back to the source using the incoming interface.

  ---

  Explanation/Reference:

  Strict Reverse Path Forwarding (RPF) is a security feature that is used to detect and prevent IP spoofing attacks on a network. It works by checking the routing information for incoming packets to ensure that they are coming from the source address that is indicated in the packet's header. In strict RPF mode, the firewall will check the best route back to the source of the incoming packet using the incoming interface. If the packet's source address does not match the route back to the source, the packet is dropped. This helps to prevent attackers from spoofing their IP address and attempting to access the network.

  Reference: https://kb.fortinet.com/kb/documentLink.do?externalID=FD33955

• Question 183:

  To complete the final step of a Security Fabric configuration, an administrator must authorize all the devices on which device?

  A. FortiManager
  B. Root FortiGate
  C. FortiAnalyzer
  D. Downstream FortiGate
  B. Root FortiGate

  ---

  Explanation/Reference:

• Question 184:

  Which statement about video filtering on FortiGate is true?

  A. Full SSL Inspection is not required.
  B. It is available only on a proxy-based firewall policy.
  C. It inspects video files hosted on file sharing services.
  D. Video filtering FortiGuard categories are based on web filter FortiGuard categories.
  B. It is available only on a proxy-based firewall policy.

  ---

  Explanation/Reference:

  Reference: https://docs.fortinet.com/document/fortigate/7.0.0/new-features/190873/video-filtering

• Question 185:

  Refer to exhibit.

  An administrator configured the web filtering profile shown in the exhibit to block access to all social networking sites except Twitter. However, when users try to access twitter.com, they are redirected to a FortiGuard web filtering block page.

  

  Based on the exhibit, which configuration change can the administrator make to allow Twitter while blocking all other social networking sites?

  A. On the FortiGuard Category Based Filter configuration, set Action to Warning for Social Networking
  B. On the Static URL Filter configuration, set Type to Simple
  C. On the Static URL Filter configuration, set Action to Exempt.
  D. On the Static URL Filter configuration, set Action to Monitor.
  C. On the Static URL Filter configuration, set Action to Exempt.

  ---

  Explanation/Reference:

  Reference: https://fortinet77.rssing.com/chan-56127603/article113.html Based on the exhibit, the administrator has configured the FortiGuard Category Based Filter to block access to all social networking sites, and has also configured a Static URL Filter to block access to twitter.com. As a result, users are being redirected to a block page when they try to access twitter.com. To allow users to access twitter.com while blocking all other social networking sites, the administrator can make the following configuration change: On the Static URL Filter configuration, set Action to Exempt: By setting the Action to Exempt, the administrator can override the block on twitter.com that was specified in the FortiGuard Category Based Filter. This will allow users to access twitter.com, while all other social networking sites will still be blocked.