Fortinet NSE 4 - FortiOS 7.0 - NSE4_FGT-7.0 Free Exam Questions

A. diagnose wad session list | grep "hook=pre"&"hook=out"

B. diagnose wad session list

C. diagnose wad session list | grep hook=pre&&hook=out

D. diagnose wad session list | grep hook-pre&&hook-out

A. The public key of the web server certificate must be installed on the browser.

B. The CA certificate that signed the web-server certificate must be installed on the browser.

C. The web-server certificate must be installed on the browser.

D. The private key of the CA certificate that signed the browser certificate must be installed on the browser.

A. Standard mode security profiles apply to user groups.

B. Standard access mode supports nested groups.

C. Standard mode security profiles apply to organizational units (OU).

D. Standard mode uses Windows convention-NetBios: Domain\Username.

A. Firewall Policy

B. Authentication Rule

C. Proxy Policy

D. Authentication scheme

A. The Services field removes the requirement to create multiple VIPs for different services.

B. The Services field prevents multiple sources of traffic from using multiple services to connect to a single

C. The Services field is used when you need to bundle several VIPs into VIP groups.

D. The Services field prevents SNAT and DNAT from being combined in the same policy.

A. A root CA

B. A person

C. A CRL

D. A subordinate CA

A. set protocol tcp

B. set fortiguard-anycast disable

C. set webfilter-force-off disable

D. set webfilter-cache disable

A. Log backups from the CLI can be configured to upload to FTP as a scheduled time

B. Log downloads from the GUI are limited to the current filter view

C. Log downloads from the GUI are stored as LZ4 compressed files.

D. Log backups from the CLI cannot be restored to another FortiGate.

A. Antivirus scan

B. Machine learning scan

C. Trojan scan

D. Ransomware scan

A. It limits the scope of application control to scan application traffic based on application category only.

B. It limits the scope of application control to scan application traffic on DNS protocol only.

C. It limits the scope of application control to the browser-based technology category only.

D. It limits the scope of application control to scan application traffic using parent signatures only

A. The action for the category Games is set to block.

B. The usage quota for the IP address 10.0.1.10 has expired

C. The web site miniclip.com matches a static URL filter whose action is set to Warning.

D. The name of the applied web filter profile is default.

A. Any web request to the 172.25.120.0/24 subnet is allowed to bypass the proxy.

B. Browsers can be configured to retrieve this PAC file from the FortiGate.

C. All requests not made to Fortinet.com or the 172.25.120.0/24 subnet, have to go through altproxy.corp.com: 8060.

D. Any web request fortinet.com is allowed to bypass the proxy.

A. It inspects video files hosted on file sharing services.

B. It is available only on a proxy-based firewall policy.

C. Video filtering FortiGuard categories are based on web filter FortiGuard categories.

D. Full SSL Inspection is not required.

A. Any available IP address in the WAN (port1) subnet 10.200.1.0/24

B. 10.200.1.10

C. 10.0.1.254

D. 10.200.1.1

A. Tunnels are negotiated dynamically between spokes.

B. Every spoke requires a static tunnel to be configured to other spokes so that phase 1 and phase 2 proposals are defined in advance.

C. ADVPN is only supported with IKEv2.

D. It requires the use of dynamic routing protocols so that spokes can learn the routes to other spokes.