Free Oct-2022 NSE4_FGT-7.0 Certification Sample Questions certification Exam [Q96-Q120]

QUESTION 96
Which two statements are correct about SLA targets? (Choose two.)

QUESTION 97
View the exhibit.

A
user behind the FortiGate is trying to go to http://www.addictinggames.com (Addicting Games). Based on this configuration, which statement is true?

QUESTION 98
A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes.
* All traffic must be routed through the primary tunnel when both tunnels are up
* The secondary tunnel must be used only if the primary tunnel goes down
* In addition, FortiGate should be able to detect a dead tunnel to speed up tunnel failover Which two key configuration changes are needed on FortiGate to meet the design requirements? (Choose two,)

QUESTION 99
Refer to the FortiGuard connection debug output.

Based on the output shown in the exhibit, which two statements are correct? (Choose two.)

QUESTION 100
Which engine handles application control traffic on the next-generation firewall (NGFW) FortiGate?

QUESTION 101
Refer to the exhibit.



The exhibit contains a network interface configuration, firewall policies, and a CLI console configuration.
How will FortiGate handle user authentication for traffic that arrives on the LAN interface?

QUESTION 102
Refer to the exhibit.

Based on the raw log, which two statements are correct? (Choose two.)

QUESTION 103
Which two statements are correct regarding FortiGate HA cluster virtual IP addresses? (Choose two.)

QUESTION 104
If Internet Service is already selected as Source in a firewall policy, which other configuration objects can be added to the Source filed of a firewall policy?

QUESTION 105
An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

QUESTION 106
Which three statements about a flow-based antivirus profile are correct? (Choose three.)

QUESTION 107
An administrator has configured a strict RPF check on FortiGate. Which statement is true about the strict RPF check?

QUESTION 108
Which two policies must be configured to allow traffic on a policy-based next-generation firewall (NGFW) FortiGate? (Choose two.)

QUESTION 109
Refer to the exhibit.

The exhibit shows the IPS sensor configuration.
If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)

QUESTION 110
When configuring a firewall virtual wire pair policy, which following statement is true?

QUESTION 111
Which three authentication timeout types are availability for selection on FortiGate? (Choose three.)

QUESTION 112
Refer to the exhibit.



The exhibit contains a network diagram, firewall policies, and a firewall address object configuration.
An administrator created a Deny policy with default settings to deny Webserver access for Remote-user2. Remote-user2 is still able to access Webserver.
Which two changes can the administrator make to deny Webserver access for Remote-User2? (Choose two.)

QUESTION 113
What is the primary FortiGate election process when the HA override setting is disabled?

QUESTION 114
An administrator is configuring an IPsec VPN between site A and site B.
The Remote Gateway setting in both sites has been configured as . For site A, the local quick mode selector is
192.168.1.0/24 and the remote quick mode selector is 192.168.2.0/24.
Which subnet must the administrator configure for the local quick mode selector for site B?

QUESTION 115
An administrator is running the following sniffer command:

Which three pieces of Information will be Included in me sniffer output? {Choose three.)

QUESTION 116
If Internet Service is already selected as in a firewall policy, which other configuration objects can be selected to the Destination

QUESTION 117
Refer to the exhibit.

The exhibit shows a CLI output of firewall policies, proxy policies, and proxy addresses.
How
does FortiGate process the traffic sent to http://www.fortinet.com?

QUESTION 118
Which two attributes are required on a certificate so it can be used as a CA certificate on SSL Inspection?
(Choose two.)

QUESTION 119
Which three CLI commands can you use to troubleshoot Layer 3 issues if the issue is in neither the physical layer nor the link layer? (Choose three.)

QUESTION 120
Refer to the exhibit.

Which contains a session diagnostic output. Which statement is true about the session diagnostic output?