NSE4_FGT-7.0 Free Practice Test

- (Exam Topic 2)
Which two actions can you perform only from the root FortiGate in a Security Fabric? (Choose two.)

1. A. Shut down/reboot a downstream FortiGate device.
2. B. Disable FortiAnalyzer logging for a downstream FortiGate device.
3. C. Log in to a downstream FortiSwitch device.
4. D. Ban or unban compromised hosts.

Correct Answer: AB

- (Exam Topic 2)
Which of statement is true about SSL VPN web mode?

1. A. The tunnel is up while the client is connected.
2. B. It supports a limited number of protocols.
3. C. The external network application sends data through the VPN.
4. D. It assigns a virtual IP address to the client.

Correct Answer: B
FortiGate_Security_6.4 page 575 - Web mode requires only a web browser, but supports a limited number of protocols.

- (Exam Topic 2)
Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides (client and server) have terminated the session?

1. A. To remove the NAT operation.
2. B. To generate logs
3. C. To finish any inspection operations.
4. D. To allow for out-of-order packets that could arrive after the FIN/ACK packets.

Correct Answer: D

- (Exam Topic 1)
An administrator has configured outgoing Interface any in a firewall policy. Which statement is true about the policy list view?

1. A. Policy lookup will be disabled.
2. B. By Sequence view will be disabled.
3. C. Search option will be disabled
4. D. Interface Pair view will be disabled.

Correct Answer: D
https://kb.fortinet.com/kb/documentLink.do?externalID=FD47821

- (Exam Topic 2)
View the exhibit.

Which of the following statements are correct? (Choose two.)

1. A. This setup requires at least two firewall policies with the action set to IPsec.
2. B. Dead peer detection must be disabled to support this type of IPsec setup.
3. C. The TunnelB route is the primary route for reaching the remote sit
4. D. The TunnelA route is used only if the TunnelB VPN is down.
5. E. This is a redundant IPsec setup.

Correct Answer: CD