Fortinet Fortinet Certifications NSE4_FGT-7.2 Questions & Answers

• Question 41:

  Refer to exhibit.

  An administrator configured the web filtering profile shown in the exhibit to block access to all social networking sites except Twitter. However, when users try to access twitter.com, they are redirected to a FortiGuard web filtering block page.

  

  Based on the exhibit, which configuration change can the administrator make to allow Twitter while blocking all other social networking sites?

  A. On the FortiGuard Category Based Filter configuration, set Action to Warning for Social Networking

  B. On the Static URL Filter configuration, set Type to Simple

  C. On the Static URL Filter configuration, set Action to Exempt.

  D. On the Static URL Filter configuration, set Action to Monitor.

  Correct Answer: C

  Reference: https://fortinet77.rssing.com/chan-56127603/article113.html Based on the exhibit, the administrator has configured the FortiGuard Category Based Filter to block access to all social networking sites, and has also configured a Static URL Filter to block access to twitter.com. As a result, users are being redirected to a block page when they try to access twitter.com. To allow users to access twitter.com while blocking all other social networking sites, the administrator can make the following configuration change: On the Static URL Filter configuration, set Action to Exempt: By setting the Action to Exempt, the administrator can override the block on twitter.com that was specified in the FortiGuard Category Based Filter. This will allow users to access twitter.com, while all other social networking sites will still be blocked.

• Question 42:

  Refer to the exhibit.

  

  Given the security fabric topology shown in the exhibit, which two statements are true? (Choose two.)

  A. There are five devices that are part of the security fabric.

  B. Device detection is disabled on all FortiGate devices.

  C. This security fabric topology is a logical topology view.

  D. There are 19 security recommendations for the security fabric.

  Correct Answer: CD

  References: https://docs.fortinet.com/document/fortigate/5.6.0/cookbook/761085/results https://docs.fortinet.com/document/fortimanager/6.2.0/new-features/736125/security-fabric-topology

• Question 43:

  The HTTP inspection process in web filtering follows a specific order when multiple features are enabled in the web filter profile. What order must FortiGate use when the web filter profile has features enabled, such as safe search?

  A. DNS-based web filter and proxy-based web filter

  B. Static URL filter, FortiGuard category filter, and advanced filters

  C. Static domain filter, SSL inspection filter, and external connectors filters

  D. FortiGuard category filter and rating filter

  Correct Answer: B

  FortiGate Security 7.2 Study Guide (p.285): "Remember that the web filtering profile has several features. So, if you have enabled many of them, the inspection order flows as follows:

  1.

  The local static URL filter

  2.

  FortiGuard category filtering (to determine a rating)

  3.

  Advanced filters (such as safe search or removing Active X components)" Reference: https://fortinet121.rssing.com/chan-67705148/all_p1.html

• Question 44:

  Which scanning technique on FortiGate can be enabled only on the CLI?

  A. Heuristics scan

  B. Trojan scan

  C. Antivirus scan

  D. Ransomware scan

  Correct Answer: A

  Reference: https://docs.fortinet.com/document/fortigate/6.0.0/handbook/567568/enabling-scanning

• Question 45:

  How does FortiGate act when using SSL VPN in web mode?

  A. FortiGate acts as an FDS server.

  B. FortiGate acts as an HTTP reverse proxy.

  C. FortiGate acts as DNS server.

  D. FortiGate acts as router.

  Correct Answer: B

  Reference: https://pub.kb.fortinet.com/ksmcontent/Fortinet-Public/current/Fortigate_v4.0MR3/fortigate-sslvpn-40-mr3.pdf

• Question 46:

  Refer to the exhibit.

  

  An administrator has configured a performance SLA on FortiGate, which failed to generate any traffic. Why is FortiGate not sending probes to 4.2.2.2 and 4.2.2.1 servers? (Choose two.)

  A. The Detection Mode setting is not set to Passive.

  B. Administrator didn't configure a gateway for the SD-WAN members, or configured gateway is not valid.

  C. The configured participants are not SD-WAN members.

  D. The Enable probe packets setting is not enabled.

  Correct Answer: BD

• Question 47:

  Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy-based inspection mode? (Choose two.)

  A. Warning

  B. Exempt

  C. Allow

  D. Learn

  Correct Answer: AC

• Question 48:

  Which of the following statements about backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)

  A. Log downloads from the GUI are limited to the current filter view

  B. Log backups from the CLI cannot be restored to another FortiGate.

  C. Log backups from the CLI can be configured to upload to FTP as a scheduled time

  D. Log downloads from the GUI are stored as LZ4 compressed files.

  Correct Answer: AB

• Question 49:

  FortiGuard categories can be overridden and defined in different categories. To create a web rating override for example.com home page, the override must be configured using a specific syntax. Which two syntaxes are correct to configure web rating for the home page? (Choose two.)

  A. www.example.com:443

  B. www.example.com

  C. example.com

  D. www.example.com/index.html

  Correct Answer: BC

  When using FortiGuard category filtering to allow or block access to a website, one option is to make a web rating override and define the website in a different category. Web ratings are only for host names - no URLs or wildcard characters are allowed.

  OK: google.com or www.google.com

  NO OK: www.google.com/index.html or google.*

  FortiGate_Security_6.4 page 384

  When using FortiGuard category filtering to allow or block access to a website, one option is to make a web rating override and define the website in a different category. Web ratings are only for host names-- "no URLs or wildcard characters

  are allowed".

• Question 50:

  Refer to the exhibit.

  A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.

  

  Based on the phase 2 configuration shown in the exhibit, which configuration change will bring phase 2 up?

  A. On Remote-FortiGate, set Seconds to 43200.

  B. On HQ-FortiGate, set Encryption to AES256.

  C. On HQ-FortiGate, enable Diffie-Hellman Group 2.

  D. On HQ-FortiGate, enable Auto-negotiate.

  Correct Answer: B

  Reference: https://docs.fortinet.com/document/fortigate/5.4.0/cookbook/168495