NSE4_FGT-7.0 Free Practice Test

- (Exam Topic 2)
Refer to the exhibit.

Which contains a Performance SLA configuration.
An administrator has configured a performance SLA on FortiGate. Which failed to generate any traffic. Why is FortiGate not generating any traffic for the performance SLA?

1. A. Participants configured are not SD-WAN members.
2. B. There may not be a static route to route the performance SLA traffic.
3. C. The Ping protocol is not supported for the public servers that are configured.
4. D. You need to turn on the Enable probe packets switch.

Correct Answer: D
Reference:
https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/478384/performance-sla-linkmonitoring

- (Exam Topic 2)
Refer to the exhibit.


The exhibits show a network diagram and the explicit web proxy configuration.
In the command diagnose sniffer packet, what filter can you use to capture the traffic between the client and the explicit web proxy?

1. A. ‘host 192.168.0.2 and port 8080’
2. B. ‘host 10.0.0.50 and port 80’
3. C. ‘host 192.168.0.1 and port 80’
4. D. ‘host 10.0.0.50 and port 8080’

Correct Answer: A

- (Exam Topic 2)
Refer to the exhibit.

Which contains a network diagram and routing table output. The Student is unable to access Webserver.
What is the cause of the problem and what is the solution for the problem?

1. A. The first packet sent from Student failed the RPF check.This issue can be resolved by adding a static route to 10.0.4.0/24 through wan1.
2. B. The first reply packet for Student failed the RPF check.This issue can be resolved by adding a static route to 10.0.4.0/24 through wan1.
3. C. The first reply packet for Student failed the RPF check.This issue can be resolved by adding a static route to 203.0.114.24/32 through port3.
4. D. The first packet sent from Student failed the RPF check.This issue can be resolved by adding a static route to 203.0.114.24/32 through port3.

Correct Answer: D

- (Exam Topic 1)
When configuring a firewall virtual wire pair policy, which following statement is true?

1. A. Any number of virtual wire pairs can be included, as long as the policy traffic direction is the same.
2. B. Only a single virtual wire pair can be included in each policy.
3. C. Any number of virtual wire pairs can be included in each policy, regardless of the policy traffic direction settings.
4. D. Exactly two virtual wire pairs need to be included in each policy.

Correct Answer: A
Reference: https://kb.fortinet.com/kb/documentLink.do?externalID=FD48690

- (Exam Topic 2)
Which three methods are used by the collector agent for AD polling? (Choose three.)

1. A. FortiGate polling
2. B. NetAPI
3. C. Novell API
4. D. WMI
5. E. WinSecLog

Correct Answer: BDE
Reference: https://kb.fortinet.com/kb/documentLink.do?externalID=FD47732