CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Fortinet
  5. NSE4_FGT-7.0

Free NSE4_FGT-7.0 Exam Braindumps (page: 24)

Page 24 of 44
PDF with 172 Questions

Which statements best describe auto discovery VPN (ADVPN). (Choose two.)

  1. It requires the use of dynamic routing protocols so that spokes can learn the routes to other spokes.
  2. ADVPN is only supported with IKEv2.
  3. Tunnels are negotiated dynamically between spokes.
  4. Every spoke requires a static tunnel to be configured to other spokes so that phase 1 and phase 2 proposals are defined in advance.

Answer(s): A,C



View the exhibit.


Which of the following statements are correct? (Choose two.)

  1. This setup requires at least two firewall policies with the action set to IPsec.
  2. Dead peer detection must be disabled to support this type of IPsec setup.
  3. The TunnelB route is the primary route for reaching the remote site. The TunnelA route is used only if the TunnelB VPN is down.
  4. This is a redundant IPsec setup.

Answer(s): C,D



To complete the final step of a Security Fabric configuration, an administrator must authorize all the devices on which device?

  1. FortiManager
  2. Root FortiGate
  3. FortiAnalyzer
  4. Downstream FortiGate

Answer(s): B



If the Issuer and Subject values are the same in a digital certificate, which type of entity was the certificate issued to?

  1. A CRL
  2. A person
  3. A subordinate CA
  4. A root CA

Answer(s): D



Page 24 of 44



Post your Comments and Discuss Fortinet NSE4_FGT-7.0 exam with other Community members:

mfundo commented on October 23, 2023
f you memorize all questions and answers you are going to get around 85% or more. Looks like some questions are no longer in the exam. But still good enoug to pass.
SOUTH AFRICA
upvote

Soharb commented on May 02, 2022
If you memorize all questions and answers you are going to get around 85% or more. Looks like some questions are no longer in the exam. But still good enoug to pass.
INDIA
upvote