Online Access Free NSE4_FGT-7.0 Exam Questions

FortiGuard categories can be overridden and defined in different categories. To create a web rating override for example.com home page, the override must be configured using a specific syntax.
Which two syntaxes are correct to configure web rating for the home page? (Choose two.)

• A.example.com
• B.www.example.com:443
• C.www.example.com/index.html
• D.www.example.com

An administrator has configured the following settings:

• A.Denied users are blocked for 30 minutes.
• B.The number of logs generated by denied traffic is reduced.
• C.A session for denied traffic is created.
• D.Device detection on all interfaces is enforced for 30 minutes.

Refer to the exhibit.

Based on the administrator profile settings, what permissions must the administrator set to run the diagnose firewall auth list CLI command on FortiGate?

• A.Read/Write permission for Log & Report
• B.CLI diagnostics commands permission
• C.Read/Write permission for Firewall
• D.Custom permission for Network

Examine this PAC file configuration.

Which of the following statements are true? (Choose two.)

• A.Browsers can be configured to retrieve this PAC file from the FortiGate.
• B.All requests not made to Fortinet.com or the 172.25.120.0/24 subnet, have to go through altproxy.corp.com: 8060.
• C.Any web request to the 172.25.120.0/24 subnet is allowed to bypass the proxy.
• D.Any web request fortinet.com is allowed to bypass the proxy.

Refer to the exhibit.



The exhibit contains a network diagram, firewall policies, and a firewall address object configuration.
An administrator created a Deny policy with default settings to deny Webserver access for Remote-user2. Remote-user2 is still able to access Webserver.
Which two changes can the administrator make to deny Webserver access for Remote-User2? (Choose two.)

• A.Set the Destination address as Deny_IP in the Allow-access policy.
• B.Enable match vip in the Deny policy.
• C.Set the Destination address as Web_server in the Deny policy.
• D.Disable match-vip in the Deny policy.