NSE4_FGT-7.2 Questions Bank

Page: 6 / 12

Question 24

What is the effect of enabling auto-negotiate on the phase 2 configuration of an IPsec tunnel?

Options:

FortiGate automatically negotiates different local and remote addresses with the remote peer.

FortiGate automatically negotiates a new security association after the existing security association expires.

FortiGate automatically negotiates different encryption and authentication algorithms with the remote peer.

FortiGate automatically brings up the IPsec tunnel and keeps it up, regardless of activity on the IPsec tunnel.

Question 25

Refer to exhibit.

An administrator configured the web filtering profile shown in the exhibit to block access to all social networking sites except Twitter. However, when users try to access twitter.com, they are redirected to a FortiGuard web filtering block page.

Based on the exhibit, which configuration change can the administrator make to allow Twitter while blocking all other social networking sites?

Options:

On the FortiGuard Category Based Filter configuration, set Action to Warning for Social Networking

On the Static URL Filter configuration, set Type to Simple

On the Static URL Filter configuration, set Action to Exempt.

On the Static URL Filter configuration, set Action to Monitor.

Question 26

Refer to the FortiGuard connection debug output.

Based on the output shown in the exhibit, which two statements are correct? (Choose two.)

Options:

A local FortiManager is one of the servers FortiGate communicates with.

One server was contacted to retrieve the contract information.

There is at least one server that lost packets consecutively.

FortiGate is using default FortiGuard communication settings.

Question 27

A team manager has decided that, while some members of the team need access to a particular website, the majority of the team does not Which configuration option is the most effective way to support this request?