NSE4_FGT-7.0 questions and answers

Which two VDOMs are the default VDOMs created when FortiGate is set up in split VDOM mode? (Choose two.)

Refer to the exhibits.

The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) tor Facebook.

Users are given access to the Facebook web application. They can play video content hosted on Facebook but they are unable to leave reactions on videos or other types of posts.

Which part of the policy configuration must you change to resolve the issue?

Refer to the exhibit showing a debug flow output.

Which two statements about the debug flow output are correct? (Choose two.)

Which two statements are true about collector agent advanced mode? (Choose two.)

Which engine handles application control traffic on the next-generation firewall (NGFW) FortiGate?

Which statement is correct regarding the inspection of some of the services available by web applications embedded in third-party websites?

The HTTP inspection process in web filtering follows a specific order when multiple features are enabled in the web filter profile.

What order must FortiGate use when the web filter profile has features enabled, such as safe search?

When browsing to an internal web server using a web-mode SSL VPN bookmark, which IP address is used as the source of the HTTP request?

Which of the following statements about central NAT are true? (Choose two.)

Which statements are true regarding firewall policy NAT using the outgoing interface IP address with fixed port disabled? (Choose two.)

Refer to the exhibit.

An administrator is running a sniffer command as shown in the exhibit.

Which three pieces of information are included in the sniffer output? (Choose three.)

Refer to the exhibit.

The exhibit shows a CLI output of firewall policies, proxy policies, and proxy addresses.

How does FortiGate process the traffic sent to http://www.fortinet.com?

Refer to the exhibit.

The global settings on a FortiGate device must be changed to align with company security policies.

What does the Administrator account need to access the FortiGate global settings?

If Internet Service is already selected as Source in a firewall policy, which other configuration objects can be added to the Source filed of a firewall policy?

In which two ways can RPF checking be disabled? (Choose two )

Which two statements about FortiGate FSSO agentless polling mode are true? (Choose two.)

Which three statements about security associations (SA) in IPsec are correct? (Choose three.)

Refer to the FortiGuard connection debug output.

Based on the output shown in the exhibit, which two statements are correct? (Choose two.)

Which of statement is true about SSL VPN web mode?

By default, FortiGate is configured to use HTTPS when performing live web filtering with FortiGuard servers.

Which CLI command will cause FortiGate to use an unreliable protocol to communicate with FortiGuard servers for live web filtering?

Which three options are the remote log storage options you can configure on FortiGate? (Choose three.)

Which two types of traffic are managed only by the management VDOM? (Choose two.)

A network administrator has enabled full SSL inspection and web filtering on FortiGate. When visiting any HTTPS websites, the browser reports certificate warning errors. When visiting HTTP websites, the browser
does not report errors.

What is the reason for the certificate warning errors?

An administrator observes that the port1 interface cannot be configured with an IP address.

What can be the reasons for that? (Choose three.)

Which statement about video filtering on FortiGate is true?

An administrator has configured outgoing Interface any in a firewall policy.

Which statement is true about the policy list view?