Online NSE4_FGT-7.0 Practice TestMore Fortinet Products >

Free Fortinet NSE4_FGT-7.0 Exam Dumps Questions

Fortinet NSE4_FGT-7.0: Fortinet NSE 4 - FortiOS 7.0

- Get instant access to NSE4_FGT-7.0 practice exam questions

- Get ready to pass the Fortinet NSE 4 - FortiOS 7.0 exam right now using our Fortinet NSE4_FGT-7.0 exam package, which includes Fortinet NSE4_FGT-7.0 practice test plus an Fortinet NSE4_FGT-7.0 Exam Simulator.

- The best online NSE4_FGT-7.0 exam study material and preparation tool is here.

4.5

(2610 ratings)

Question 1

- (Exam Topic 2)
Which two statements are correct regarding FortiGate HA cluster virtual IP addresses? (Choose two.)

A. Heartbeat interfaces have virtual IP addresses that are manually assigned.

B. A change in the virtual IP address happens when a FortiGate device joins or leaves the cluster.

C. Virtual IP addresses are used to distinguish between cluster members.

D. The primary device in the cluster is always assigned IP address 169.254.0.1.

Correct Answer:BD

Question 2

- (Exam Topic 2)
What types of traffic and attacks can be blocked by a web application firewall (WAF) profile? (Choose three.)

A. Traffic to botnetservers

B. Traffic to inappropriate web sites

C. Server information disclosure attacks

D. Credit card data leaks

E. SQL injection attacks

Correct Answer:CDE

Question 3

- (Exam Topic 2)
Which of the following statements about central NAT are true? (Choose two.)

A. IP tool references must be removed from existing firewall policies before enabling central NAT.

B. Central NAT can be enabled or disabled from the CLI only.

C. Source NAT, using central NAT, requires at least one central SNAT policy.

D. Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall.

Correct Answer:AB

Question 4

- (Exam Topic 2)
An administrator must disable RPF check to investigate an issue.
Which method is best suited to disable RPF without affecting features like antivirus and intrusion prevention system?

A. Enable asymmetric routing, so the RPF check will be bypassed.

B. Disable the RPF check at the FortiGate interface level for the source check.

C. Disable the RPF check at the FortiGate interface level for the reply check.

D. Enable asymmetric routing at the interface level.

Correct Answer:B
Reference: https://kb.fortinet.com/kb/documentLink.do?externalID=FD33955

Question 5

- (Exam Topic 1)
Refer to the exhibit.
NSE4_FGT-7.0 dumps exhibit

The exhibit contains the configuration for an SD-WAN Performance SLA, as well as the output of diagnose sys virtual-wan-link health-check.
Which interface will be selected as an outgoing interface?

A. port2

B. port4

C. port3

D. port1

Correct Answer:D
Port 1 shows the lowest latency.

Question 6

- (Exam Topic 2)
Which three statements are true regarding session-based authentication? (Choose three.)

A. HTTP sessions are treated as a single user.

B. IP sessions from the same source IP address are treated as a single user.

C. It can differentiate among multiple clients behind the same source IP address.

D. It requires more resources.

E. It is not recommended if multiple users are behind the source NAT

Correct Answer:ACD

START NSE4_FGT-7.0 EXAM