Which statement about the policy ID number of a firewall policy is true?
Answer(s): A
Refer to the exhibits.The SSL VPN connection fails when a user attempts to connect to it. What should the user do to successfully connect to SSL VPN?
https://docs.fortinet.com/document/fortigate/5.4.0/cookbook/150494
An administrator has configured a strict RPF check on FortiGate. Which statement is true about the strict RPF check?
Answer(s): B
Strict Reverse Path Forwarding (RPF) is a security feature that is used to detect and prevent IP spoofing attacks on a network. It works by checking the routing information for incoming packets to ensure that they are coming from the source address that is indicated in the packet's header. In strict RPF mode, the firewall will check the best route back to the source of the incoming packet using the incoming interface. If the packet's source address does not match the route back to the source, the packet is dropped. This helps to prevent attackers from spoofing their IP address and attempting to access the network.
https://kb.fortinet.com/kb/documentLink .do?externalID=FD33955
Refer to the exhibits.The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) for Facebook .Users are given access to the Facebook web application. They can play video content hosted on Facebook but they are unable to leave reactions on videos or other types of posts. Which part of the policy configuration must you change to resolve the issue?
They can play video (tick) content hosted on Facebook, but they are unable to leave reactions on videos or other types of posts. This indicate that the rule are partially working as they can watch video but cant react, i.e. liking the content. So must be an issue with the SSL inspection rather then adding an app rule.
Which two statements about FortiGate FSSO agentless polling mode are true? (Choose two.)
Answer(s): B,C
You can deploy FSSO w/o installing an agent. FG polls the DCs directly, instead of receiving logon info indirectly from a collector agent.Because FG collects all of the data itself, agentless polling mode requires greater system resources, and it doesn't scale as easily.Agentless polling mode operates in a similar way to WinSecLog, but with only two event IDs: 4768 and 4769. Because there's no collector agent, FG uses the SMB protocol to read the event viewer logs from the DCs.FG acts as a collector. It 's responsible for polling on top of its normal FSSO tasks but does not have all the extra features, such as workstation checks, that are available with the external collector agent.
https://kb.fortinet.com/kb/documentLink .do?externalID=FD47732https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-How-to-troubleshoot-FSSO- agentless-polling/ta-p/214349
Post your Comments and Discuss Fortinet NSE4_FGT-7.2 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the NSE4_FGT-7.2 content, but please register or login to continue.