Online Access Free Fortinet.NSE4_FGT-7.0.v2022-02-14.q59 Practice Test (Page 2)

NSE4_FGT-7.0 Exam Question 1

Which two statements are true about the FGCP protocol? (Choose two.)

A.Is used to discover FortiGate devices in different HA groups

B.Elects the primary FortiGate device

C.Runs only over the heartbeat links

D.Not used when FortiGate is in Transparent mode

NSE4_FGT-7.0 Exam Question 2

Which statement regarding the firewall policy authentication timeout is true?

A.It is a hard timeout. The FortiGate removes the temporary policy for a user's source IP address after this timer has expired.

B.It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source IP.

C.It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source MAC.

D.It is a hard timeout. The FortiGate removes the temporary policy for a user's source MAC address after this timer has expired.

NSE4_FGT-7.0 Exam Question 3

A network administrator has enabled full SSL inspection and web filtering on FortiGate. When visiting any HTTPS websites, the browser reports certificate warning errors. When visiting HTTP websites, the browser does not report errors.
What is the reason for the certificate warning errors?

A.The browser requires a software update.

B.FortiGate does not support full SSL inspection when web filtering is enabled.

C.The CA certificate set on the SSL/SSH inspection profile has not been imported into the browser.

D.There are network connectivity issues.

NSE4_FGT-7.0 Exam Question 4

View the exhibit.

Which of the following statements are correct? (Choose two.)

A.This is a redundant IPsec setup.

B.Dead peer detection must be disabled to support this type of IPsec setup.

C.The TunnelB route is the primary route for reaching the remote site. The TunnelA route is used only if the TunnelB VPN is down.

D.This setup requires at least two firewall policies with the action set to IPsec.

NSE4_FGT-7.0 Exam Question 5

Which CLI command allows administrators to troubleshoot Layer 2 issues, such as an IP address conflict?

A.get system status

B.get system performance status

C.diagnose sys top

D.get system arp

Other Version: 101Fortinet.Pass4leader.NSE4_FGT-7.0.v2022-04-05.by.ingemar.59q.pdf

Latest Upload: 274ISACA.CGEIT.v2025-09-19.q537; 153Fortinet.FCP_FWF_AD-7.4.v2025-09-18.q62; 154Scrum.SAFe-Practitioner.v2025-09-18.q63; 146Workday.Workday-Prism-Analytics.v2025-09-17.q17; 131Oracle.1Z0-1055-24.v2025-09-17.q28; 129Oracle.1Z1-182.v2025-09-17.q32; 243Nutanix.NCP-US-6.5.v2025-09-16.q73; 265Oracle.1z0-071.v2025-09-16.q232; 203Oracle.1Z1-922.v2025-09-16.q125; 325CyberArk.PAM-CDE-RECERT.v2025-09-15.q100

NSE4_FGT-7.0 Exam Question 1

NSE4_FGT-7.0 Exam Question 2

NSE4_FGT-7.0 Exam Question 3

NSE4_FGT-7.0 Exam Question 4

NSE4_FGT-7.0 Exam Question 5

Download PDF File