CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Fortinet
  5. NSE4_FGT-7.0

Free NSE4_FGT-7.0 Exam Braindumps (page: 21)

Page 21 of 44
PDF with 172 Questions

Examine the network diagram shown in the exhibit, then answer the following question:


Which one of the following routes is the best candidate route for FGT1 to route traffic from the Workstation to the Web server?

  1. 172.16.0.0/16 [50/0] via 10.4.200.2, port2 [5/0]
  2. 0.0.0.0/0 [20/0] via 10.4.200.2, port2
  3. 10.4.200.0/30 is directly connected, port2
  4. 172.16.32.0/24 is directly connected, port1

Answer(s): D



Which of the following statements about central NAT are true? (Choose two.)

  1. IP tool references must be removed from existing firewall policies before enabling central NAT.
  2. Central NAT can be enabled or disabled from the CLI only.
  3. Source NAT, using central NAT, requires at least one central SNAT policy.
  4. Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall.

Answer(s): A,B



Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?

  1. The public key of the web server certificate must be installed on the browser.
  2. The web-server certificate must be installed on the browser.
  3. The CA certificate that signed the web-server certificate must be installed on the browser.
  4. The private key of the CA certificate that signed the browser certificate must be installed on the browser.

Answer(s): C



View the exhibit.


A user behind the FortiGate is trying to go to http://www.addictinggames.com (Addicting Games). Based on this configuration, which statement is true?

  1. Addicting.Games is allowed based on the Application Overrides configuration.
  2. Addicting.Games is blocked on the Filter Overrides configuration.
  3. Addicting.Games can be allowed only if the Filter Overrides actions is set to Exempt.
  4. Addcting.Games is allowed based on the Categories configuration.

Answer(s): A



Page 21 of 44



Post your Comments and Discuss Fortinet NSE4_FGT-7.0 exam with other Community members:

mfundo commented on October 23, 2023
f you memorize all questions and answers you are going to get around 85% or more. Looks like some questions are no longer in the exam. But still good enoug to pass.
SOUTH AFRICA
upvote

Soharb commented on May 02, 2022
If you memorize all questions and answers you are going to get around 85% or more. Looks like some questions are no longer in the exam. But still good enoug to pass.
INDIA
upvote