Online Access Free NSE4_FGT-7.2 Exam Questions

What inspection mode does FortiGate use if it is configured as a policy-based next-generation firewall (NGFW)?

• A.Flow-based inspection
• B.Certificate inspection
• C.Full Content inspection
• D.Proxy-based inspection

An organization requires remote users to send external application data running on their PCs and access FTP resources through an SSL/TLS connection.
Which FortiGate configuration can achieve this goal?

• A.SSL VPN quick connection
• B.Zero trust network access
• C.SSL VPN bookmark
• D.SSL VPN tunnel

Which three statements explain a flow-based antivirus profile? (Choose three.)

• A.Flow-based inspection optimizes performance compared to proxy-based inspection.
• B.The IPS engine handles the process as a standalone.
• C.If a virus is detected, the last packet is delivered to the client.
• D.FortiGate buffers the whole file but transmits to the client at the same time.
• E.Flow-based inspection uses a hybrid of the scanning modes available in proxy-based inspection.

Which three statements are true regarding session-based authentication? (Choose three.)

• A.HTTP sessions are treated as a single user.
• B.It is not recommended if multiple users are behind the source NAT
• C.IP sessions from the same source IP address are treated as a single user.
• D.It can differentiate among multiple clients behind the same source IP address.
• E.It requires more resources.

Which two statements are true about the RPF check? (Choose two.)

• A.The RPF check is run on the first sent packet of any new session.
• B.The RPF check is run on the first reply packet of any new session.
• C.RPF is a mechanism that protects FortiGate and your network from IP spoofing attacks.
• D.The RPF check is run on the first sent and reply packet of any new session.