NSE4_FGT-7.2 Free Practice Test

Refer to the exhibit.

Which contains a session diagnostic output. Which statement is true about the session diagnostic output?

1. A. The session is in SYN_SENT state.
2. B. The session is in FIN_ACK state.
3. C. The session is in FTN_WAIT state.
4. D. The session is in ESTABLISHED state.

Correct Answer: A
Indicates TCP (proto=6) session in SYN_SENT state (proto=state=2) https://kb.fortinet.com/kb/viewContent.do?externalId=FD30042

FortiGuard categories can be overridden and defined in different categories. To create a web rating override for example.com home page, the override must be configured using a specific syntax.
Which two syntaxes are correct to configure web rating for the home page? (Choose two.)

1. A. www.example.com:443
2. B. www.example.com
3. C. example.com
4. D. www.example.com/index.html

Correct Answer: BC
When using FortiGuard category filtering to allow or block access to a website, one option is to make a web rating override and define the website in a different category. Web ratings are only for host names - no URLs or wildcard characters are allowed.
OK: google.com or www.google.com
NO OK: www.google.com/index.html or google.* FortiGate_Security_6.4 page 384
When using FortiGuard category filtering to allow or block access to a website, one option is to make a web rating override and define the website in a different category. Web ratings are only for host names-- "no URLs or wildcard characters are allowed".

What are two benefits of flow-based inspection compared to proxy-based inspection? (Choose two.)

1. A. FortiGate uses fewer resources.
2. B. FortiGate performs a more exhaustive inspection on traffic.
3. C. FortiGate adds less latency to traffic.
4. D. FortiGate allocates two sessions per connection.

Correct Answer: AC