Free NSE4_FGT-7.0 Exam braindumps download (NSE4_FGT-7.0 exam dumps Free)

QUESTION: 70

Which CLI command will display sessions both from client to the proxy and from the proxy to the servers?

diagnose wad session list
diagnose wad session list | grep hook-pre&&hook-out
diagnose wad session list | grep hook=pre&&hook=out
diagnose wad session list | grep "hook=pre"&"hook=out"

Answer(s): A

Refer to the exhibit.

Which contains a Performance SLA configuration.
An administrator has configured a performance SLA on FortiGate. Which failed to generate any traffic. Why is FortiGate not generating any traffic for the performance SLA?

Participants configured are not SD-WAN members.
There may not be a static route to route the performance SLA traffic.
The Ping protocol is not supported for the public servers that are configured.
You need to turn on the Enable probe packets switch.

Answer(s): D

Reference:

https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/478384/performance-sla-linkmonitoring

Show Answer Next Question

QUESTION: 72

Which two actions can you perform only from the root FortiGate in a Security Fabric? (Choose two.)

Shut down/reboot a downstream FortiGate device.
Disable FortiAnalyzer logging for a downstream FortiGate device.
Log in to a downstream FortiSwitch device.
Ban or unban compromised hosts.

Answer(s): A,B

Show Answer Next Question

QUESTION: 73

Which three statements about security associations (SA) in IPsec are correct? (Choose three.)

Phase 2 SAs are used for encrypting and decrypting the data exchanged through the tunnel.
An SA never expires.
A phase 1 SA is bidirectional, while a phase 2 SA is directional.
Phase 2 SA expiration can be time-based, volume-based, or both.
Both the phase 1 SA and phase 2 SA are bidirectional.

Answer(s): A,C,D

Show Answer Next Question

QUESTION: 74

Which three authentication timeout types are availability for selection on FortiGate? (Choose three.)

hard-timeout
auth-on-demand
soft-timeout
new-session
Idle-timeout

Answer(s): A,D,E

Reference:

https://kb.fortinet.com/kb/documentLink.do?externalID=FD37221

Show Answer Next Question

Free NSE4_FGT-7.0 Exam Braindumps
Fortinet NSE 4 - FortiOS 7.0 Questions 70–74 (page: 16)

QUESTION: 70

QUESTION: 71

Reference:

QUESTION: 72

QUESTION: 73

QUESTION: 74

Reference:

Free NSE4_FGT-7.0 Exam Braindumps Fortinet NSE 4 - FortiOS 7.0 Questions 70–74 (page: 16)

QUESTION: 70

QUESTION: 71

Reference:

QUESTION: 72

QUESTION: 73

QUESTION: 74

Reference:

Free NSE4_FGT-7.0 Exam Braindumps
Fortinet NSE 4 - FortiOS 7.0 Questions 70–74 (page: 16)