Fortinet NSE4_FGT-7.2 Exam Questions Instant Access

Question 1

Which two protocol options are available on the CLI but not on the GUI when configuring an SD-WAN Performance SLA? (Choose two.)

ADNS

Bping

Cudp-echo

DTWAMP

Answer : C, D

Question 2

To complete the final step of a Security Fabric configuration, an administrator must authorize all the devices on

which device?

AFortiManager

BRoot FortiGate

CFortiAnalyzer

DDownstream FortiGate

Answer : B

Question 3

Which two actions can you perform only from the root FortiGate in a Security Fabric? (Choose two.)

AShut down/reboot a downstream FortiGate device.

BDisable FortiAnalyzer logging for a downstream FortiGate device.

CLog in to a downstream FortiSwitch device.

DBan or unban compromised hosts.

Answer : A, B

Question 4

Which statement about the policy ID number of a firewall policy is true?

AIt is required to modify a firewall policy using the CLI.

BIt represents the number of objects used in the firewall policy.

CIt changes when firewall policies are reordered.

DIt defines the order in which rules are processed.

Answer : A

Question 5

Refer to the exhibit.

Which contains a session diagnostic output. Which statement is true about the session diagnostic output?

AThe session is in SYN_SENT state.

BThe session is in FIN_ACK state.

CThe session is in FTN_WAIT state.

DThe session is in ESTABLISHED state.

Answer : A

Indicates TCP (proto=6) session in SYN_SENT state (proto=state=2) https://kb.fortinet.com/kb/viewContent.do?externalId=FD30042

Question 6

Examine this FortiGate configuration:

How does the FortiGate handle web proxy traffic coming from the IP address 10.2.1.200 that requires authorization?

AIt always authorizes the traffic without requiring authentication.

BIt drops the traffic.

CIt authenticates the traffic using the authentication scheme SCHEME2.

DIt authenticates the traffic using the authentication scheme SCHEME1.

Answer : D

'What happens to traffic that requires authorization, but does not match any authentication rule? The active and passive SSO schemes to use for those cases is defined under config authentication setting'

Question 7

Which CLI command will display sessions both from client to the proxy and from the proxy to the servers?

Adiagnose wad session list

Bdiagnose wad session list | grep hook-pre&&hook-out

Cdiagnose wad session list | grep hook=pre&&hook=out

Ddiagnose wad session list | grep 'hook=pre'&'hook=out'

Answer : A

Fortinet NSE 4 - FortiOS 7.2 NSE4_FGT-7.2 Exam Questions