Online Access Free NSE4_FGT-7.2 Exam Questions

Which statement about the IP authentication header (AH) used by IPsec is true?

• A.AH provides data integrity bur no encryption.
• B.AH does not provide any data integrity or encryption.
• C.AH does not support perfect forward secrecy.
• D.AH provides strong data integrity but weak encryption.

Which two protocols are used to enable administrator access of a FortiGate device? (Choose two.)

• A.FortiTelemetry
• B.FTM
• C.HTTPS
• D.SSH

What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?

• A.It limits the scanning of application traffic to the application category only.
• B.It limits the scanning of application traffic to use parent signatures only.
• C.It limits the scanning of application traffic to the browser-based technology category only.
• D.It limits the scanning of application traffic to the DNS protocol only.

The IPS engine is used by which three security features? (Choose three.)

• A.DNS filter
• B.Web application firewall
• C.Application control
• D.Web filter in flow-based inspection
• E.Antivirus in flow-based inspection

Which of the following statements about central NAT are true? (Choose two.)

• A.Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall.
• B.Central NAT can be enabled or disabled from the CLI only.
• C.Source NAT, using central NAT, requires at least one central SNAT policy.
• D.IP tool references must be removed from existing firewall policies before enabling central NAT .