Online Access Free NSE4_FGT-7.2 Exam Questions

An administrator configures outgoing interface any in a firewall policy.
What is the result of the policy list view?

• A.Interface Pair view is disabled.
• B.By Sequence view is disabled.
• C.Search option is disabled.
• D.Policy lookup is disabled.

A network administrator is configuring a new IPsec VPN tunnel on FortiGate. The remote peer IP address is dynamic. In addition, the remote peer does not support a dynamic DNS update service.
What type of remote gateway should the administrator configure on FortiGate for the new IPsec VPN tunnel to work?

• A.Dialup User
• B.Dynamic DNS
• C.Pre-shared Key
• D.Static IP Address

A network administrator has enabled full SSL inspection and web filtering on FortiGate. When visiting any HTTPS websites, the browser reports certificate warning errors. When visiting HTTP websites, the browser does not report errors.
What is the reason for the certificate warning errors?

• A.The certificate used by FortiGate for SSL inspection does not contain the required certificate extensions.
• B.The matching firewall policy is set to proxy inspection mode.
• C.The full SSL inspection feature does not have a valid license.
• D.The browser does not trust the certificate used by FortiGate for SSL inspection.

What are two scanning techniques supported by FortiGate? (Choose two.)

• A.Antivirus scan
• B.Machine learning scan
• C.Ransomware scan
• D.Trojan scan

A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes.
* All traffic must be routed through the primary tunnel when both tunnels are up
* The secondary tunnel must be used only if the primary tunnel goes down
* In addition, FortiGate should be able to detect a dead tunnel to speed up tunnel failover Which two key configuration changes are needed on FortiGate to meet the design requirements? (Choose two,)

• A.Configure a high distance on the static route for the primary tunnel, and a lower distance on the static route for the secondary tunnel.
• B.Enable Auto-negotiate and Autokey Keep Alive on the phase 2 configuration of both tunnels.
• C.Enable Dead Peer Detection.
• D.Configure a lower distance on the static route for the primary tunnel, and a higher distance on the static route for the secondary tunnel.