Fortinet NSE4_FGT-7.0 Test Engine Practice Test Questions, Exam Dumps [Q22-Q37]

NEW QUESTION 22
Refer to the exhibits.
Exhibit A.

Exhibit B.

An administrator creates a new address object on the root FortiGate (Local-FortiGate) in the security fabric. After synchronization, this object is not available on the downstream FortiGate (ISFW).
What must the administrator do to synchronize the address object?

NEW QUESTION 23
Refer to the exhibit.

Based on the administrator profile settings, what permissions must the administrator set to run the diagnose firewall auth list CLI command on FortiGate?

NEW QUESTION 24
View the exhibit.

Which of the following statements are correct? (Choose two.)

NEW QUESTION 25
Which Security rating scorecard helps identify configuration weakness and best practice violations in your network?

NEW QUESTION 26
Refer to the exhibit.

The global settings on a FortiGate device must be changed to align with company security policies. What does the Administrator account need to access the FortiGate global settings?

NEW QUESTION 27
Which two statements are correct regarding FortiGate FSSO agentless polling mode? (Choose two.)

NEW QUESTION 28
Which two protocols are used to enable administrator access of a FortiGate device? (Choose two.)

NEW QUESTION 29
Refer to the exhibit.


The exhibit contains the configuration for an SD-WAN Performance SLA, as well as the output of diagnose sys virtual-wan-link health-check.
Which interface will be selected as an outgoing interface?

NEW QUESTION 30
Refer to the exhibit.

Which contains a session list output. Based on the information shown in the exhibit, which statement is true?

NEW QUESTION 31
Examine the IPS sensor configuration shown in the exhibit, and then answer the question below.


An administrator has configured the WINDOWS_SERVERS IPS sensor in an attempt to determine whether the influx of HTTPS traffic is an attack attempt or not. After applying the IPS sensor, FortiGate is still not generating any IPS logs for the HTTPS traffic.
What is a possible reason for this?

NEW QUESTION 32
An administrator does not want to report the logon events of service accounts to FortiGate. What setting on the collector agent is required to achieve this?

NEW QUESTION 33
Refer to the exhibit.

The exhibit contains a network diagram, virtual IP, IP pool, and firewall policies configuration.
The WAN (port1) interface has the IP address 10.200.1.1/24.
The LAN (port3) interface has the IP address 10 .0.1.254. /24.
The first firewall policy has NAT enabled using IP Pool.
The second firewall policy is configured with a VIP as the destination address.
Which IP address will be used to source NAT the internet traffic coming from a workstation with the IP address 10.0.1.10?

NEW QUESTION 34
Refer to the exhibit showing a debug flow output.

Which two statements about the debug flow output are correct? (Choose two.)

NEW QUESTION 35
What is the effect of enabling auto-negotiate on the phase 2 configuration of an IPsec tunnel?

NEW QUESTION 36
Refer to the exhibit.

Which contains a session list output. Based on the information shown in the exhibit, which statement is true?

NEW QUESTION 37
When a firewall policy is created, which attribute is added to the policy to support recording logs to a FortiAnalyzer or a FortiManager and improves functionality when a FortiGate is integrated with these devices?