Online Access Free NSE4_FGT-7.0 Exam Questions

Which two statements about SSL VPN between two FortiGate devices are true? (Choose two.)

• A.The client FortiGate uses the SSL VPN tunnel interface type to connect SSL VPN.
• B.Server FortiGate requires a CA certificate to verify the client FortiGate certificate.
• C.The client FortiGate requires a client certificate signed by the CA on the server FortiGate.
• D.The client FortiGate requires a manually added route to remote subnets.

Which two statements about IPsec authentication on FortiGate are correct? (Choose two.)

• A.A certificate is not required on the remote peer when you set the signature as the authentication method.
• B.FortiGate supports pre-shared key and signature as authentication methods.
• C.Enabling XAuth results in a faster authentication because fewer packets are exchanged.
• D.For a stronger authentication, you can also enable extended authentication (XAuth) to request the remote peer to provide a username and password

An administrator has configured the following settings:

• A.Device detection on all interfaces is enforced for 30 minutes.
• B.The number of logs generated by denied traffic is reduced.
• C.A session for denied traffic is created.
• D.Denied users are blocked for 30 minutes.

Refer to the FortiGuard connection debug output.

Based on the output shown in the exhibit, which two statements are correct? (Choose two.)

• A.FortiGate is using default FortiGuard communication settings.
• B.There is at least one server that lost packets consecutively.
• C.One server was contacted to retrieve the contract information.
• D.A local FortiManager is one of the servers FortiGate communicates with.

Refer to the exhibit.

The exhibits show a network diagram and the explicit web proxy configuration.
In the command diagnose sniffer packet, what filter can you use to capture the traffic between the client and the explicit web proxy?

• A.'host 192.168.0.2 and port 8080'
• B.'host 10.0.0.50 and port 8080'
• C.'host 10.0.0.50 and port 80'
• D.'host 192.168.0.1 and port 80'