Download Fortinet NSE 4 -FortiOS 7-0.CertDumps.NSE4_FGT-7.0.2023-01-01.1e.172q.vcex

Download Exam

File Info

Exam Fortinet NSE 4 - FortiOS 7.0
Number NSE4_FGT-7.0
File Name Fortinet NSE 4 -FortiOS 7-0.CertDumps.NSE4_FGT-7.0.2023-01-01.1e.172q.vcex
Size 11.72 Mb
Posted January 01, 2023
Downloads 28

How to open VCEX & EXAM Files?

Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.


With discount: 20%


Demo Questions

Question 1
Which two statements about antivirus scanning mode are true? (Choose two.)

  • A: In proxy-based inspection mode, files bigger than the buffer size are scanned.
  • B: In flow-based inspection mode, FortiGate buffers the file, but also simultaneously transmits it to the client.
  • C: In proxy-based inspection mode, antivirus scanning buffers the whole file for scanning, before sending it to the client.
  • D: In flow-based inspection mode, files bigger than the buffer size are scanned.

Question 2
FortiGuard categories can be overridden and defined in different categories. To create a web rating override for home page, the override must be configured using a specific syntax.
Which two syntaxes are correct to configure web rating for the home page? (Choose two.)

  • A:
  • B:
  • C:
  • D:

Question 3
An administrator is configuring an IPsec VPN between site A and site A. The Remote Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is and the remote quick mode selector is subnet must the administrator configure for the local quick mode selector for site B?

  • A:
  • B:
  • C:
  • D:

Question 4
Which CLI command allows administrators to troubleshoot Layer 2 issues, such as an IP address conflict?

  • A: get system status
  • B: get system performance status
  • C: diagnose sys top
  • D: get system arp

Question 5
Refer to the exhibit.


The exhibit shows the IPS sensor configuration.
If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)

  • A: The sensor will allow attackers matching the NTP.Spoofed.KoD.DoS signature.
  • B: The sensor will block all attacks aimed at Windows servers.
  • C: The sensor will reset all connections that match these signatures.
  • D: The sensor will gather a packet log for all matched traffic.

Question 6
Which statement is correct regarding the inspection of some of the services available by web applications embedded in third-party websites?

  • A: The security actions applied on the web applications will also be explicitly applied on the third-party websites.
  • B: The application signature database inspects traffic only from the original web application server.
  • C: FortiGuard maintains only one signature of each web application that is unique.
  • D: FortiGate can inspect sub-application traffic regardless where it was originated.

Question 7
Which two statements are correct about SLA targets? (Choose two.)

  • A: You can configure only two SLA targets per one Performance SLA.
  • B: SLA targets are optional.
  • C: SLA targets are required for SD-WAN rules with a Best Quality strategy.
  • D: SLA targets are used only when referenced by an SD-WAN rule.

Question 8
Refer to the exhibits.
Exhibit A.


Exhibit B.


The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) tor Facebook.
Users are given access to the Facebook web application. They can play video content hosted on Facebook but they are unable to leave reactions on videos or other types of posts.
Which part of the policy configuration must you change to resolve the issue?

  • A: The SSL inspection needs to be a deep content inspection.
  • B: Force access to Facebook using the HTTP service.
  • C: Additional application signatures are required to add to the security policy.
  • D: Add Facebook in the URL category in the security policy.

Question 9
Which two attributes are required on a certificate so it can be used as a CA certificate on SSL Inspection? (Choose two.)

  • A: The keyUsage extension must be set to keyCertSign.
  • B: The common name on the subject field must use a wildcard name.
  • C: The issuer must be a public CA.
  • D: The CA extension must be set to TRUE.

Question 10
An administrator wants to configure Dead Peer Detection (DPD) on IPSEC VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when no traffic is observed in the tunnel.
Which DPD mode on FortiGate will meet the above requirement?

  • A: Disabled
  • B: On Demand
  • C: Enabled
  • D: On Idle


You can buy ProfExam with a 20% discount..

Get Now!


Use ProfExam Simulator to open VCEX and EXAM files
ProfExam Screen


Use VCE Exam Simulator to open VCE files