Online Access Free Fortinet.NSE4_FGT-7.2.v2023-09-04.q73 Practice Test (Page 2)

NSE4_FGT-7.2 Exam Question 1

Refer to the exhibit showing a debug flow output.

Which two statements about the debug flow output are correct? (Choose two.)

A.The debug flow is of ICMP traffic.

B.A new traffic session is created.

C.The default route is required to receive a reply.

D.A firewall policy allowed the connection.

NSE4_FGT-7.2 Exam Question 2

Which two statements are correct regarding FortiGate HA cluster virtual IP addresses? (Choose two.)

A.Virtual IP addresses are used to distinguish between cluster members.

B.The primary device in the cluster is always assigned IP address 169.254.0.1.

C.Heartbeat interfaces have virtual IP addresses that are manually assigned.

D.A change in the virtual IP address happens when a FortiGate device joins or leaves the cluster.

NSE4_FGT-7.2 Exam Question 3

A network administrator is configuring a new IPsec VPN tunnel on FortiGate. The remote peer IP address is dynamic. In addition, the remote peer does not support a dynamic DNS update service.
What type of remote gateway should the administrator configure on FortiGate for the new IPsec VPN tunnel to work?

A.Static IP Address

B.Dialup User

C.Dynamic DNS

D.Pre-shared Key

NSE4_FGT-7.2 Exam Question 4

An administrator wants to configure timeouts for users. Regardless of the userTMs behavior, the timer should start as soon as the user authenticates and expire after the configured value.
Which timeout option should be configured on FortiGate?

A.new-session

B.idle-timeout

C.auth-on-demand

D.hard-timeout

E.soft-timeout

NSE4_FGT-7.2 Exam Question 5

An administrator has configured a strict RPF check on FortiGate. Which statement is true about the strict RPF check?

A.The strict RPF check is run on the first sent and reply packet of any new session.

B.Strict RPF checks the best route back to the source using the incoming interface.

C.Strict RPF checks only for the existence of at least one active route back to the source using the incoming interface.

D.Strict RPF allows packets back to sources with all active routes.

Other Version: 2402Fortinet.NSE4_FGT-7.2.v2024-07-25.q104; 2774Fortinet.NSE4_FGT-7.2.v2023-04-03.q69

Latest Upload: 107Salesforce.ADM-201.v2025-09-06.q260; 104Oracle.1Z0-1055-23.v2025-09-06.q48; 104Cisco.010-151.v2025-09-06.q130; 130PMI.PMI-PBA.v2025-09-05.q160; 138Salesforce.Advanced-Cross-Channel.v2025-09-04.q41; 133EC-COUNCIL.312-40.v2025-09-04.q87; 148Oracle.1Z1-591.v2025-09-03.q129; 128Oracle.1z0-1065-25.v2025-09-03.q26; 162Cisco.350-701.v2025-09-03.q218; 125Oracle.1Z0-1195-25.v2025-09-03.q20

NSE4_FGT-7.2 Exam Question 1

NSE4_FGT-7.2 Exam Question 2

NSE4_FGT-7.2 Exam Question 3

NSE4_FGT-7.2 Exam Question 4

NSE4_FGT-7.2 Exam Question 5

Download PDF File