Online Access Free NSE4_FGT-7.0 Exam Questions

Refer to the exhibit.

According to the certificate values shown in the exhibit, which type of entity was the certificate issued to?

• A.A bridge CA
• B.A user
• C.A root CA
• D.A subordinate

Examine the IPS sensor configuration shown in the exhibit, and then answer the question below.


An administrator has configured the WINDOWS_SERVERS IPS sensor in an attempt to determine whether the influx of HTTPS traffic is an attack attempt or not. After applying the IPS sensor, FortiGate is still not generating any IPS logs for the HTTPS traffic.
What is a possible reason for this?

• A.A DoS policy should be used, instead of an IPS sensor.
• B.The HTTPS signatures have not been added to the sensor.
• C.The IPS filter is missing the Protocol: HTTPS option.
• D.The firewall policy is not using a full SSL inspection profile.
• E.A DoS policy should be used, instead of an IPS sensor.

Refer to the exhibit to view the application control profile.

Users who use Apple FaceTime video conferences are unable to set up meetings.
In this scenario, which statement is true?

• A.Apple FaceTime belongs to the custom blocked filter.
• B.The category of Apple FaceTime is being monitored.
• C.The category of Apple FaceTime is being blocked.
• D.Apple FaceTime belongs to the custom monitored filter.

Which two protocol options are available on the CLI but not on the GUI when configuring an SD-WAN Performance SLA? (Choose two.)

• A.DNS
• B.udp-echo
• C.TWAMP
• D.ping

Which two statements are correct about a software switch on FortiGate? (Choose two.)

• A.It can group only physical interfaces
• B.It can be configured only when FortiGate is operating in NAT mode
• C.Can act as a Layer 2 switch as well as a Layer 3 router
• D.All interfaces in the software switch share the same IP address