Simulado NSE 4 (7.2)

An administrator needs to configure VPN user access for multiple sites using the same soft FortiToken. Each site has a FortiGate VPN gateway What must the administrator do to achieve this objective?

What is a reason for triggering IPS fail open?

An organization requires remote users to send external application data running on their PCs and access FTP resources through an SSL/TLS connection Which FortiGate configuration can achieve this goal?

Refer to the exhibit The exhibit shows the FortiGuard Category Based Filter section of a corporate web filter profile An administrator must block access to download.com, which belongs to the Freeware and Software Downloads category The administrator must also allow other websites in the same category What are two solutions for satisfying the requirement? (Choose two.)

What are two features of collector agent advanced mode? (Choose two.)

Refer to the exhibits Exhibit A shows a network diagram. Exhibit B shows the firewall policy configuration and a VIP ” object configuration | The WAN (port1) interface has the IP address 10.200.1.1/24 The LAN (port3) interface has the IP address 10.0.1.254/24. 10.200.1.1/24 The administrator disabled the WebServer firewall policy. Which IP address will be used to source NAT the traffic, if a user with address 10.0.1.10 connects over SSH to the host with address 10.200.3.17

A network administrator has enabled full SSL inspection and web filtering on FortiGate. When visiting any HTTPS websites, the browser reports certificate warning errors. When visiting HTTP websites, the browser does not report errors. What is the reason for the certificate warning errors?

Which three methods are used by the collector agent for AD polling? (Choose three.)

Refer to the exhibit Based on the administrator profile settings. what permissions must the administrator set torun the diagnose firewall auth list CLI command on FortiGate?

Which two features of IPsec IKEv1 authentication are supported by FortiGate? (Choose two.)

What is the primary FortiGate election process when the HA override setting is disabled?

Refer to the exhibit, which contains a static route configuration An administrator created a static route for Amazon Web Services. Which CLI command must the administrator use to view the route?

Refer to the exhibit The Root and To_Internet VDOMs are configured in NAT mode. The DMZ and Local VDOMs are configured in transparent mode The Root VDOM is the management VDOM. The To_Internet VDOM allows LAN users to access the internet. The To_Internet VDOM is the only VDOM with internet access and is directly connected to the ISP modem What can you conclude about this configuration?

How can you disable RPF checking?

You have enabled logging on a FortiGate device for event logs and all security logs, and you have set up logging to use the FortiGate local disk What is the default behavior when the local disk is full?

Which timeout setting can be responsible for deleting SSL VPN associated sessions?

An administrator wants to simplify remote access without asking users to provide user credentials Which access control method provides this solution?

Refer to the exhibits The exhibits show a firewall policy (ExhibitA ) and an antivirus profile (Exhibit B) Why is the user unable to receive a block replacement message when downloading an infected file for the first time?

Refer to the exhibits The exhibits contain a network interface configuration, firewall policies, and a CLI : console configuration How will the FortiGate device handle user authentication for traffic that arrives on the LAN interface?

Which two settings can be separately configured per VDOM on a FortiGate device? (Choose two.)

Which three CLI commands can you use to troubleshoot Layer 3 issues, if the issue is in neither the physical layer nor the link layer? (Choose three)

Refer to the exhibits An administrator creates a new address object on the root FortiGate (Local-FortiGate) in the security fabric. After synchronization, this object is not available on the downstream & Qs FortiGate (ISFW) What must the administrator do to synchronize the address object?

Refer to the exhibit The exhibit shows a diagram of a FortiGate device connected to the network and the firewall policy and IP pool configuration on the FortiGate device Which two actions does FortiGate take on internet traffic sourced from the subscribers?(Choose two.)

Refer to the exhibit The exhibit shows a diagram of a FortiGate device connected to the network and the firewall policy and IP pool configuration on the FortiGate device Two PCs, PC1 and PC2, are connected behind FortiGate and can access the internet successfully However, when the administrator adds a third PC to the network (PC3), the PC cannot connect to the internet. Based on the information shown in the exhibit, which three configuration changes should the administrator make to fix the connectivity issue for PC3? (Choose three )

Which statement about the deployment of the Security Fabric in a multi-VDOM environment is true?

FortiGate is integrated with FortiAnalyzer and FortiManager When a firewall policy is created, which attribute is added to the policy to improve functionality and to support recording logs to FortiAnalyzer or FortiManager?

Refer to the exhibit Based on the raw log, what can you conclude from the output? (Choose two.)

What are two functions of the ZTNA rule? (Choose two.)

Refer to the exhibit Review the intrusion prevention system (IPS) profile signature settings shown in the exhibit What do you conclude when adding the FTP.Login.Failed signature to the IPS sensor profile?

Refer to the exhibit to view the firewall policy Why would the firewall policy not block a well-known virus. for example eicar?

Refer to the exhibits Exhibit A shows a topology for a FortiGate HA cluster that performs proxy-based inspection on traffic. Exhibit B shows the HA configuration and the partial output of the get system ha status command. Based on the exhibits, which two statements about the traffic passing through the cluster are true? (Choose two.

An administrator configures FortiGuard servers as DNS servers on FortiGate using default settings. What is true about the DNS connection to a FortiGuard server?

If Internet Service is already selected as Destination in a firewall policy, which other configuration object can be selected for the Destination field of a firewall policy?

Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

An administrator configures FortiGuard servers as DNS servers on FortiGate using default settings. What is true about the DNS connection to a FortiGuard server?

What is the effect of enabling auto-negotiate on the phase 2 configuration of an IPsec tunnel?

The HTTP inspection process in web filtering follows a specific order when multiple features are enabled in the web filter profile Which order must FortiGate use when the web filter profile has features such as safe search enabled?

The IPS engine is used by which three security features? (Choose three.)

Refer to the exhibit showing a FortiGuard connection debug output Based on the output, which two facts does the administrator know about the FortiGuard connection? (Choose two.)

What are two benefits of flow-based inspection compared to proxy-based inspection? (Choose two.)

What is the imitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?

What are two scanning techniques supported by FortiGate? (Choose two.)

An employee needs to connect to the office through a high-latency internet connection Which SSL VPN setting should the administrator adjust to prevent SSL VPN negotiation failure?

Which three pieces of information does FortiGate use to identify the hostname of the SSL server when SSL certificate inspection is enabled? (Choose three.)

Refer to the exhibits Exhibit A shows a network diagram. Exhibit B shows the central SNAT policy and IP pool configuration The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port3) interface has the IP 10.0.1.254/24. A firewall policy is configured to allow all destinations from LAN (port3) to WAN (port1) Central NAT is enabled, so NAT settings from matching central SNAT policies will be applied. Which IP address will be used to source NAT (SNAT) the traffic, if the user on LocalClient (10.0.1.10) pings the IP address of Remote-FortiGate (10.200.3.1)?

Refer to the exhibit. A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices The administrator has determined that phase 1 status is up, but phase 2 fails to come up. Based on the phase 2 configuration shown in the exhibit, which configuration change will bring phase 2 up?

Which two statements describe how the RPF check is used? (Choose two.)

n administrator needs to increase network bandwidth and provide redundancy. Which interface type must the administrator select to bind multiple FortiGate interfaces?

Refer to the exhibit. A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 failed to come up. The administrator has also re-entered the pre-shared key on both FortiGate devices to make sure they match. Based on the phase 1 configuration and the diagram shown in the exhibit, which two configuration changes can the administrator make to bring phase 1 up? (Choose two.)

A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes All traffic must be routed through the primary tunnel when both tunnels are up. The secondary tunnel must be used only if the primary tunnel goes down. In addition, FortiGate should be able to detect a dead tunnel to speed up tunnel failover Which two key configuration changes must the administrator make on FortiGate to meet the requirements? (Choose two.)

Which inspection mode does FortiGate use if it is configured as a policy-based next-generation firewall (NGFW)?

Refer to the exhibit Why did FortiGate drop the packet?

Refer to the exhibit Why did Fortigate drop the packet?

Which statement about video filtering on FortiGate is true?

An administrator configures outgoing interface any in a firewall policy What is the result of the policy list view?

What are two characteristics of FortiGate HA cluster virtual IP addresses? (Choose two.)

Refer to the exhibits The exhibits show a network diagram and firewall configurations An administrator created a Deny policy with default settings to deny Webserver access for Remote-User2. Remote-User1 must be able to access the Webserver. Remote-User2 must not be able fo access the Webserver. In this scenario, which two changes can th ator make to deny Webserver access for Remote-User2? (Choose two.)

Refer to the exhibits The exhibits show a network diagram and firewall configurations An administrator created a Deny policy with default settings to deny Webserver access for Remote-User2 Remote-User1 must be able to access the Webserver. Remote-User2 must not be able to access the Webserver. In this scenario, which two changes can the administrator make to deny Webserver access for Remote-User2? (Choose two )

What are two features of the NGFW policy-based mode? (Choose two)

Refer to the exhibits Exhibit A shows a network diagram. Exhibit B shows the firewall policy configuration and a VIP object configuration. The WAN (port1) interface has the IP address 10.200.1.1/24 The LAN (port3) interface has the IP address 10.0.1.254/24 The administrator disabled the WebServer firewall policy. Which IP address will be used to source NAT the traffic, if a user with address 10.0.1.10 connects over SSH to the host with address 10.200.3.1?

Refer to the exhibits Exhibit A shows the application sensor configuration. Exhibit B shows the Excessive Bandwidth and Apple filter details Based on the configuration, what will happen to Apple FaceTime if there are only a few calls originating or incoming?

Which statement is correct regarding the security fabric?

Refer to the exhibit In the network shown in the exhibit, the web client cannot connect to the HTTP web server. The administrator runs the FortiGate built-in sniffer and gets the output shown in the exhibit.

Refer to the exhibits Exhibit A The exhibits show the firewall policies and the objects used in the firewall policies. The administrator is using the Policy Lookup feature and has entered the search criteria shown in the exhibit. Which policy will be highlighted, based on the input criteria?