Fortinet NSE 4 - FortiOS 7.2 - NSE4_FGT-7.2 模擬練習
Which two inspection modes can you use to configure a firewall policy on a profile-based next-generation firewall (NGFW)? (Choose two.)
正解: B,C
What is a reason for triggering IPS fail open?
正解: A
Which two types of traffic are managed only by the management VDOM? (Choose two.)
正解: A,D
On FortiGate, which type of logs record information about traffic directly to and from the FortiGate management IP addresses?
正解: A
解説: (PassTest メンバーにのみ表示されます)
Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?
正解: A
Refer to the exhibit to view the firewall policy
Why would the firewall policy not block a well-known virus, for
example eicar?
Why would the firewall policy not block a well-known virus, for
example eicar?
正解: D
Refer to the exhibit.
The exhibit contains a network diagram, central SNAT policy, and IP pool configuration.
The WAN (port1) interface has the IP address 10.200. 1. 1/24.
The LAN (port3) interface has the IP address 10.0. 1.254/24.
A firewall policy is configured to allow to destinations from LAN (port3) to WAN (port1).
Central NAT is enabled, so NAT settings from matching Central SNAT policies will be applied.
Which IP address will be used to source NAT the traffic, if the user on Local-Client (10.0. 1. 10) pings the IP address of Remote-FortiGate (10.200.3. 1)?
The exhibit contains a network diagram, central SNAT policy, and IP pool configuration.
The WAN (port1) interface has the IP address 10.200. 1. 1/24.
The LAN (port3) interface has the IP address 10.0. 1.254/24.
A firewall policy is configured to allow to destinations from LAN (port3) to WAN (port1).
Central NAT is enabled, so NAT settings from matching Central SNAT policies will be applied.
Which IP address will be used to source NAT the traffic, if the user on Local-Client (10.0. 1. 10) pings the IP address of Remote-FortiGate (10.200.3. 1)?
正解: C
Which two statements are true about the RPF check? (Choose two.)
正解: C,D
Which two statements explain antivirus scanning modes? (Choose two.)
正解: C,D
解説: (PassTest メンバーにのみ表示されます)
Which of the following SD-WAN load balancing method use interface weight value to distribute traffic? (Choose two.)
正解: A,C
解説: (PassTest メンバーにのみ表示されます)
Which feature in the Security Fabric takes one or more actions based on event triggers?
正解: B
Refer to the exhibit.
The exhibit shows a diagram of a FortiGate device connected to the network and the firewall policy and IP pool configuration on the FortiGate device.
Which two actions does FortiGate take on internet traffic sourced from the subscribers? (Choose two.)
The exhibit shows a diagram of a FortiGate device connected to the network and the firewall policy and IP pool configuration on the FortiGate device.
Which two actions does FortiGate take on internet traffic sourced from the subscribers? (Choose two.)
正解: A,B
解説: (PassTest メンバーにのみ表示されます)
Which two statements are true when FortiGate is in transparent mode? (Choose two.)
正解: C,D
解説: (PassTest メンバーにのみ表示されます)
Refer to exhibit.
An administrator configured the web filtering profile shown in the exhibit to block access to all social networking sites except Twitter. However, when users try to access twitter.com, they are redirected to a FortiGuard web filtering block page.
Based on the exhibit, which configuration change can the administrator make to allow Twitter while blocking all other social networking sites?
An administrator configured the web filtering profile shown in the exhibit to block access to all social networking sites except Twitter. However, when users try to access twitter.com, they are redirected to a FortiGuard web filtering block page.
Based on the exhibit, which configuration change can the administrator make to allow Twitter while blocking all other social networking sites?
正解: D
解説: (PassTest メンバーにのみ表示されます)