최신 NSE4_FGT-7.0 무료덤프 - Fortinet NSE 4

문제1

Which security feature does FortiGate provide to protect servers located in the internal networks from attacks such as SQL injections?

A. Web application firewall

B. Application control

C. Antivirus

D. Denial of Service

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제2

Refer to the exhibit.

An administrator is running a sniffer command as shown in the exhibit.
Which three pieces of information are included in the sniffer output? (Choose three.)

A. Interface name

B. Packet payload

C. Ethernet header

D. IP header

E. Application header

정답: A,B,D

문제3

When configuring a firewall virtual wire pair policy, which following statement is true?

A. Only a single virtual wire pair can be included in each policy.

B. Any number of virtual wire pairs can be included in each policy, regardless of the policy traffic direction settings.

C. Exactly two virtual wire pairs need to be included in each policy.

D. Any number of virtual wire pairs can be included, as long as the policy traffic direction is the same.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제4

What inspection mode does FortiGate use if it is configured as a policy-based next-generation firewall (NGFW)?

A. Flow-based inspection

B. Full Content inspection

C. Certificate inspection

D. Proxy-based inspection

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제5

You have enabled logging on your FortiGate device for Event logs and all Security logs, and you have set up logging to use the FortiGate local disk.
What is the default behavior when the local disk is full?

A. Logs are overwritten and the only warning is issued when log disk usage reaches the threshold of 95%.

B. No new log is recorded after the warning is issued when log disk usage reaches the threshold of 95%.

C. Logs are overwritten and the first warning is issued when log disk usage reaches the threshold of 75%.

D. No new log is recorded until you manually clear logs from the local disk.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제6

Which three criteria can a FortiGate use to look for a matching firewall policy to process traffic? (Choose three.)

A. Source defined as Internet Services in the firewall policy.

B. Lowest to highest policy ID number.

C. Destination defined as Internet Services in the firewall policy.

D. Services defined in the firewall policy.

E. Highest to lowest priority defined in the firewall policy.

정답: A,C,D

문제7

Which CLI command allows administrators to troubleshoot Layer 2 issues, such as an IP address conflict?

A. get system status

B. get system arp

C. get system performance status

D. diagnose sys top

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제8

Which CLI command will display sessions both from client to the proxy and from the proxy to the servers?

A. diagnose wad session list

B. diagnose wad session list | grep hook-pre&&hook-out

C. diagnose wad session list | grep "hook=pre"&"hook=out"

D. diagnose wad session list | grep hook=pre&&hook=out

정답: A

문제9

Which three pieces of information does FortiGate use to identify the hostname of the SSL server when SSL certificate inspection is enabled? (Choose three.)

A. The host field in the HTTP header

B. The server name indication (SNI) extension in the client hello message

C. The subject alternative name (SAN) field in the server certificate

D. The serial number in the server certificate

E. The subject field in the server certificate

정답: B,C,E

문제10

An administrator has configured a strict RPF check on FortiGate. Which statement is true about the strict RPF check?

A. Strict RPF checks only for the existence of at cast one active route back to the source using the incoming interface.

B. Strict RPF checks the best route back to the source using the incoming interface.

C. The strict RPF check is run on the first sent and reply packet of any new session.

D. Strict RPF allows packets back to sources with all active routes.

정답: B

문제11

Which two settings can be separately configured per VDOM on a FortiGate device? (Choose two.)

A. NGFW mode

B. Operating mode

C. System time

D. FortiGuaid update servers

정답: A,B

설명: (DumpTOP 회원만 볼 수 있음)

최신 NSE4_FGT-7.0 무료덤프 - Fortinet NSE 4 - FortiOS 7.0

우리와 연락하기

유용한 링크

최신 업데이트