Free NSE4_FGT-7.2 Exam Braindumps
Fortinet NSE 4 - FortiOS 7.2 Questions 51–55 (page: 12)

Updated On: 10-Feb-2026

FortiGuard categories can be overridden and defined in different categories. To create a web rating override for example.com home page, the override must be configured using a specific syntax.
Which two syntaxes are correct to configure web rating for the home page? (Choose two.)

  1. www.example.com:443
  2. www.example.com
  3. example.com
  4. www.example.com/index.html

Answer(s): B,C

Explanation:

When using FortiGuard category filtering to allow or block access to a website, one option is to make a web rating override and define the website in a different category. Web ratings are only for host names - no URLs or wildcard characters are allowed.

OK: google.com or www.google.com
NO OK: www.google.com/index.html or google.*

FortiGate_Security_6.4 page 384

When using FortiGuard category filtering to allow or block access to a website, one option is to make a web rating override and define the website in a different category. Web ratings are only for host names-- "no URLs or wildcard characters are allowed".



Refer to the exhibit.



The exhibit displays the output of the CLI command: diagnose sys ha dump-by vcluster.
Which two statements are true? (Choose two.)

  1. FortiGate SN FGVM010000065036 HA uptime has been reset.
  2. FortiGate devices are not in sync because one device is down.
  3. FortiGate SN FGVM010000064692 is the primary because of higher HA uptime.
  4. FortiGate SN FGVM010000064692 has the higher HA priority.

Answer(s): A,D

Explanation:

1. Override is disable by default - OK
2. "If the HA uptime of a device is AT LEAST FIVE MINUTES (300 seconds) MORE than the HA Uptime of the other FortiGate devices, it becomes the primary" The QUESTION NO : here is : HA Uptime of FGVM01000006492 > 5 minutes? NO - 198 seconds < 300 seconds (5 minutes) Page 314 Infra Study Guide. https://docs.fortinet.com/document/fortigate/6.0.0/handbook/666653/primary-unit-selection-with- override-disab



Refer to the exhibit.



The exhibit displays the output of the CLI command: diagnose sys ha dump-by vcluster.
Which two statements are true? (Choose two.)

  1. FortiGate SN FGVM010000065036 HA uptime has been reset.
  2. FortiGate devices are not in sync because one device is down.
  3. FortiGate SN FGVM010000064692 is the primary because of higher HA uptime.
  4. FortiGate SN FGVM010000064692 has the higher HA priority.

Answer(s): A,D

Explanation:

1. Override is disable by default - OK
2. "If the HA uptime of a device is AT LEAST FIVE MINUTES (300 seconds) MORE than the HA Uptime of the other FortiGate devices, it becomes the primary" The QUESTION NO : here is : HA Uptime of FGVM01000006492 > 5 minutes? NO - 198 seconds < 300 seconds (5 minutes) Page 314 Infra Study Guide. https://docs.fortinet.com/document/fortigate/6.0.0/handbook/666653/primary-unit-selection-with- override-disab



Refer to the exhibit.



A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up. but phase 2 fails to come up. Based on the phase 2 configuration shown in the exhibit, what configuration change will bring phase 2 up?

  1. On HQ-FortiGate, enable Auto-negotiate.
  2. On Remote-FortiGate, set Seconds to 43200.
  3. On HQ-FortiGate, enable Diffie-Hellman Group 2.
  4. On HQ-FortiGate, set Encryption to AES256.

Answer(s): D


Reference:

https://docs.fortinet.com/document/fortigate/5.4.0/cookbook/168495

Encryption and authentication algorithm needs to match in order for IPSEC be successfully established.



Which three options are the remote log storage options you can configure on FortiGate? (Choose three.)

  1. FortiCache
  2. FortiSIEM
  3. FortiAnalyzer
  4. FortiSandbox
  5. FortiCloud

Answer(s): B,C,E


Reference:

https://docs.fortinet.com/document/fortigate/6.0.0/handbook/265052/logging-and-reporting- overview



Viewing page 12 of 36
Viewing questions 56 - 60 out of 174 questions


Post your Comments and Discuss Fortinet NSE4_FGT-7.2 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!