Free NSE4_FGT-7.0 Exam braindumps download (NSE4_FGT-7.0 exam dumps Free)

QUESTION: 60

Refer to the exhibit.

Which contains a network diagram and routing table output. The Student is unable to access Webserver.
What is the cause of the problem and what is the solution for the problem?

The first packet sent from Student failed the RPF check.
This issue can be resolved by adding a static route to 10.0.4.0/24 through wan1.
The first reply packet for Student failed the RPF check.
This issue can be resolved by adding a static route to 10.0.4.0/24 through wan1.
The first reply packet for Student failed the RPF check.
This issue can be resolved by adding a static route to 203.0.114.24/32 through port3.
The first packet sent from Student failed the RPF check.
This issue can be resolved by adding a static route to 203.0.114.24/32 through port3.

Answer(s): D

Show Answer Next Question

QUESTION: 61

Which two statements ate true about the Security Fabric rating? (Choose two.)

It provides executive summaries of the four largest areas of security focus.
Many of the security issues can be fixed immediately by clicking Apply where available.
The Security Fabric rating must be run on the root FortiGate device in the Security Fabric.
The Security Fabric rating is a free service that comes bundled with alt FortiGate devices.

Answer(s): B,C

Reference:

https://docs.fortinet.com/document/fortigate/6.4.0/administration- guide/292634/security-rating

Show Answer Next Question

QUESTION: 62

Which two statements are correct regarding FortiGate HA cluster virtual IP addresses? (Choose two.)

Heartbeat interfaces have virtual IP addresses that are manually assigned.
A change in the virtual IP address happens when a FortiGate device joins or leaves the cluster.
Virtual IP addresses are used to distinguish between cluster members.
The primary device in the cluster is always assigned IP address 169.254.0.1.

Answer(s): B,D

Show Answer Next Question

QUESTION: 63

An administrator has configured two-factor authentication to strengthen SSL VPN access. Which additional best practice can an administrator implement?