NSE4_FGT-7.2 Exam Dumps - Fortinet NSE4 Questions and Answers

Source defined as Internet Services in the firewall policy.

Destination defined as Internet Services in the firewall policy.

Highest to lowest priority defined in the firewall policy.

Services defined in the firewall policy.

Lowest to highest policy ID number.

Flow-based inspection uses a hybrid of the scanning modes available in proxy-based inspection.

If a virus is detected, the last packet is delivered to the client.

The IPS engine handles the process as a standalone.

FortiGate buffers the whole file but transmits to the client at the same time.

Flow-based inspection optimizes performance compared to proxy-based inspection.

Inter-VDOM links are required to allow traffic between the Local and Root VDOMs.

A static route is required on the To_Internet VDOM to allow LAN users to access the internet.

Inter-VDOM links are required to allow traffic between the Local and DMZ VDOMs.

Inter-VDOM links are not required between the Root and To_Internet VDOMs because the Root VDOM is used only as a management VDOM.

Heuristics scan

Trojan scan

Antivirus scan

Ransomware scan

The client FortiGate requires a client certificate signed by the CA on the server FortiGate.

The client FortiGate requires a manually added route to remote subnets.

The client FortiGate uses the SSL VPN tunnel interface type to connect SSL VPN.

The server FortiGate requires a CA certificate to verify the client FortiGate certificate.

Change the csf setting on ISFW (downstream) to set configuration-sync local.

Change the csf setting on ISFW (downstream) to set authorization-request-type certificate.

Change the csf setting on both devices to set downstream-access enable.

Change the csf setting on Local-FortiGate (root) to set fabric-object-unification default.

FortiGate uses fewer resources.

FortiGate performs a more exhaustive inspection on traffic.

FortiGate adds less latency to traffic.

FortiGate allocates two sessions per connection.

The firmware image must be manually uploaded to each FortiGate.

Only secondary FortiGate devices are rebooted.

Uninterruptable upgrade is enabled by default.

Traffic load balancing is temporally disabled while upgrading the firmware.

It always authorizes the traffic without requiring authentication.

It drops the traffic.

It authenticates the traffic using the authentication scheme SCHEME2.

It authenticates the traffic using the authentication scheme SCHEME1.

Antivirus in flow-based inspection

Web filter in flow-based inspection

Application control

DNS filter

Web application firewall