Free NSE4_FGT-7.0 Exam Braindumps (page: 22)

Page 22 of 44

Examine this FortiGate configuration:

How does the FortiGate handle web proxy traffic coming from the IP address 10.2.1.200 that requires authorization?

  1. It always authorizes the traffic without requiring authentication.
  2. It drops the traffic.
  3. It authenticates the traffic using the authentication scheme SCHEME2.
  4. It authenticates the traffic using the authentication scheme SCHEME1.

Answer(s): D

Explanation:

“What happens to traffic that requires authorization, but does not match any authentication rule? The active and passive SSO schemes to use for those cases is defined under config authentication setting”



Which statement about the IP authentication header (AH) used by IPsec is true?

  1. AH does not provide any data integrity or encryption.
  2. AH does not support perfect forward secrecy.
  3. AH provides data integrity bur no encryption.
  4. AH provides strong data integrity but weak encryption.

Answer(s): C



Refer to the exhibit.


The exhibits show a network diagram and the explicit web proxy configuration. In the command diagnose sniffer packet, what filter can you use to capture the traffic between the client and the explicit web proxy?

  1. ‘host192.168.0.2andport8080’
  2. ‘host10.0.0.50andport80’
  3. ‘host192.168.0.1andport80’
  4. ‘host10.0.0.50andport8080’

Answer(s): A



How do you format the FortiGate flash disk?

  1. Load a debug FortiOS image.
  2. Load the hardware test (HQIP) image.
  3. Execute the CLI command execute formatlogdisk.
  4. Select the format boot device option from the BIOS menu.

Answer(s): D



Page 22 of 44



Post your Comments and Discuss Fortinet NSE4_FGT-7.0 exam with other Community members:

mfundo commented on October 23, 2023
f you memorize all questions and answers you are going to get around 85% or more. Looks like some questions are no longer in the exam. But still good enoug to pass.
SOUTH AFRICA
upvote

Soharb commented on May 02, 2022
If you memorize all questions and answers you are going to get around 85% or more. Looks like some questions are no longer in the exam. But still good enoug to pass.
INDIA
upvote