CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Fortinet
  5. NSE4_FGT-7.0

Free NSE4_FGT-7.0 Exam Braindumps (page: 15)

Page 15 of 44
PDF with 172 Questions

Which two statements about antivirus scanning mode are true? (Choose two.)

  1. In proxy-based inspection mode, files bigger than the buffer size are scanned.
  2. In flow-based inspection mode, files bigger than the buffer size are scanned.
  3. In flow-based inspection mode, FortiGate buffers the file, but also simultaneously transmits it to the client.
  4. In proxy-based inspection mode, antivirus scanning buffers the whole file for scanning, before sending it to the client.

Answer(s): C,D



Which two statements are true about the FGCP protocol? (Choose two.)

  1. Is used to discover FortiGate devices in different HA groups
  2. Runs only over the heartbeat links
  3. Elects the primary FortiGate device
  4. Not used when FortiGate is in Transparent mode

Answer(s): B,C


Reference:

https://docs.fortinet.com/document/fortigate/6.4.0/ports-and-protocols/564712/fgcp-fortigate-clustering-protocol



Refer to the web filter raw logs.


Based on the raw logs shown in the exhibit, which statement is correct?

  1. The name of the firewall policy is all_users_web.
  2. Social networking web filter category is configured with the action set to authenticate.
  3. The action on firewall policy ID 1 is set to warning.
  4. Access to the social networking web filter category was explicitly blocked to all users.

Answer(s): B



Refer to the exhibit.


An administrator has configured a performance SLA on FortiGate, which failed to generate any traffic.
Why is FortiGate not sending probes to 4.2.2.2 and 4.2.2.1 servers? (Choose two.)

  1. The Detection Mode setting is not set to Passive.
  2. Administrator didn’t configure a gateway for the SD-WAN members, or configured gateway is not valid.
  3. The configured participants are not SD-WAN members.
  4. The Enable probe packets setting is not enabled.

Answer(s): B,D


Reference:

https://docs.fortinet.com/document/fortigate/6.4.6/administration-guide/580649/link-health-monitor



Page 15 of 44



Post your Comments and Discuss Fortinet NSE4_FGT-7.0 exam with other Community members:

mfundo commented on October 23, 2023
f you memorize all questions and answers you are going to get around 85% or more. Looks like some questions are no longer in the exam. But still good enoug to pass.
SOUTH AFRICA
upvote

Soharb commented on May 02, 2022
If you memorize all questions and answers you are going to get around 85% or more. Looks like some questions are no longer in the exam. But still good enoug to pass.
INDIA
upvote