NSE4 NSE4_FGT-7.0 Exam Dumps

Fortinet NSE 4 - FortiOS 7.0 Questions and Answers

Question 21

Which two inspection modes can you use to configure a firewall policy on a profile-based next-generation firewall (NGFW)? (Choose two.)

Proxy-based inspection

Certificate inspection

Flow-based inspection

Full Content inspection

Question 22

How does FortiGate act when using SSL VPN in web mode?

FortiGate acts as an FDS server.

FortiGate acts as an HTTP reverse proxy.

FortiGate acts as DNS server.

FortiGate acts as router.

Question 23

Refer to the exhibit.

The exhibit shows the IPS sensor configuration.

If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)

The sensor will allow attackers matching the NTP.Spoofed.KoD.DoS signature.

The sensor will block all attacks aimed at Windows servers.

The sensor will reset all connections that match these signatures.

The sensor will gather a packet log for all matched traffic.

Question 24

Refer to the exhibit.

An administrator has configured a performance SLA on FortiGate, which failed to generate any traffic.

Why is FortiGate not sending probes to 4.2.2.2 and 4.2.2.1 servers? (Choose two.)

The Detection Mode setting is not set to Passive.

Administrator didn't configure a gateway for the SD-WAN members, or configured gateway is not valid.

The configured participants are not SD-WAN members.

The Enable probe packets setting is not enabled.