최신 NSE4_FGT-7.2 무료덤프 - Fortinet NSE 4

문제1

Refer to the exhibit.

Based on the administrator profile settings, what permissions must the administrator set to run the diagnose firewall auth list CLI command on FortiGate?

A. Read/Write permission for Log & Report

B. Read/Write permission for Firewall

C. CLI diagnostics commands permission

D. Custom permission for Network

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제2

Which engine handles application control traffic on the next-generation firewall (NGFW) FortiGate?

A. Detection engine

B. Antivirus engine

C. Flow engine

D. Intrusion prevention system engine

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제3

Refer to exhibit.
An administrator configured the web filtering profile shown in the exhibit to block access to all social networking sites except Twitter. However, when users try to access twitter.com, they are redirected to a FortiGuard web filtering block page.

Based on the exhibit, which configuration change can the administrator make to allow Twitter while blocking all other social networking sites?

A. On the Static URL Filter configuration, set Action to Exempt.

B. On the Static URL Filter configuration, set Type to Simple

C. On the FortiGuard Category Based Filter configuration, set Action to Warning for Social Networking

D. On the Static URL Filter configuration, set Action to Monitor.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제4

Why does FortiGate Keep TCP sessions in the session table for several seconds, even after both sides (client and server) have terminated the session?

A. To allow for out-of-order packets that could arrive after the FIN/ACK packets

B. To remove the NAT operation

C. To generate logs

D. To finish any inspection operations

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제5

What are two functions of the ZTNA rule? (Choose two.)

A. It enforces access control.

B. It applies security profiles to protect traffic.

C. It redirects the client request to the access proxy.

D. It defines the access proxy.

정답: A,B

설명: (DumpTOP 회원만 볼 수 있음)

문제6

Which statements best describe auto discovery VPN (ADVPN). (Choose two.)

A. ADVPN is only supported with IKEv2.

B. Tunnels are negotiated dynamically between spokes.

C. It requires the use of dynamic routing protocols so that spokes can learn the routes to other spokes.

D. Every spoke requires a static tunnel to be configured to other spokes so that phase 1 and phase 2 proposals are defined in advance.

정답: B,C

문제7

Refer to the exhibit.

Given the interfaces shown in the exhibit. which two statements are true? (Choose two.)

A. port1-vlan and port2-vlan1 can be assigned in the same VDOM or to different VDOMs.

B. Traffic between port2 and port2-vlan1 is allowed by default.

C. port1-vlan10 and port2-vlan10 are part of the same broadcast domain.

D. port1 is a native VLAN.

정답: A,D

설명: (DumpTOP 회원만 볼 수 있음)

문제8

Which statement describes a characteristic of automation stitches?

A. They can be created on any device in the fabric.

B. They can be run only on devices in the Security Fabric.

C. They can have one or more triggers.

D. They can run multiple actions simultaneously.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제9

An administrator needs to configure VPN user access for multiple sites using the same soft FortiToken. Each site has a FortiGate VPN gateway. What must an administrator do to achieve this objective?

A. The administrator must use a FortiAuthenticator device

B. The administrator can register the same FortiToken on more than one FortiGate.

C. The administrator must use the user self-registration server.

D. The administrator can use a third-party radius OTP server.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제10

Which two protocol options are available on the CLI but not on the GUI when configuring an SD-WAN Performance SLA? (Choose two.)

A. TWAMP

B. ping

C. DNS

D. udp-echo

정답: A,D

최신 NSE4_FGT-7.2 무료덤프 - Fortinet NSE 4 - FortiOS 7.2

우리와 연락하기

유용한 링크

최신 업데이트