Fortinet NSE 4 - FortiOS 7.2 - NSE4_FGT-7.2 Exam Practice Test
Which two actions can you perform only from the root FortiGate in a Security Fabric? (Choose two.)
Correct Answer: A,D
Refer to the exhibits.
The exhibits show a network diagram and firewall configurations.
An administrator created a Deny policy with default settings to deny Webserver access for Remote-User2. Remote-User1 must be able to access the Webserver. Remote-User2 must not be able to access the Webserver.


In this scenario, which two changes can the administrator make to deny Webserver access for Remote-User2? (Choose two.)
The exhibits show a network diagram and firewall configurations.
An administrator created a Deny policy with default settings to deny Webserver access for Remote-User2. Remote-User1 must be able to access the Webserver. Remote-User2 must not be able to access the Webserver.


In this scenario, which two changes can the administrator make to deny Webserver access for Remote-User2? (Choose two.)
Correct Answer: C,D
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
Which feature in the Security Fabric takes one or more actions based on event triggers?
Correct Answer: C
Which engine handles application control traffic on the next-generation firewall (NGFW) FortiGate?
Correct Answer: B
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
Why does FortiGate Keep TCP sessions in the session table for several seconds, even after both sides (client and server) have terminated the session?
Correct Answer: A
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
Examine this PAC file configuration.
Which of the following statements are true? (Choose two.)
Which of the following statements are true? (Choose two.)
Correct Answer: C,D
Which two settings are required for SSL VPN to function between two FortiGate devices? (Choose two.)
Correct Answer: B,C
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
Refer to the exhibit.
The exhibit shows a diagram of a FortiGate device connected to the network and the firewall policy and IP pool configuration on the FortiGate device.

Which two actions does FortiGate take on internet traffic sourced from the subscribers? (Choose two.)
The exhibit shows a diagram of a FortiGate device connected to the network and the firewall policy and IP pool configuration on the FortiGate device.

Which two actions does FortiGate take on internet traffic sourced from the subscribers? (Choose two.)
Correct Answer: A,D
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
Refer to the exhibit.

Based on the administrator profile settings, what permissions must the administrator set to run the diagnose firewall auth list CLI command on FortiGate?

Based on the administrator profile settings, what permissions must the administrator set to run the diagnose firewall auth list CLI command on FortiGate?
Correct Answer: C
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
Refer to the exhibit.
An administrator added a configuration for a new RADIUS server. While configuring, the administrator selected the Include in every user group option.

What is the impact of using the Include in every user group option in a RADIUS configuration?
An administrator added a configuration for a new RADIUS server. While configuring, the administrator selected the Include in every user group option.

What is the impact of using the Include in every user group option in a RADIUS configuration?
Correct Answer: A
Which statement about video filtering on FortiGate is true?
Correct Answer: A
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).