Online Access Free Fortinet.NSE4_FGT-7.2.v2023-09-04.q73 Practice Test (Page 6)

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

A.Uninterruptable upgrade is enabled by default.

B.Traffic load balancing is temporally disabled while upgrading the firmware.

C.Only secondary FortiGate devices are rebooted.

D.The firmware image must be manually uploaded to each FortiGate.

In which two ways can RPF checking be disabled? (Choose two )

A.Enable asymmetric routing.

B.Enable anti-replay in firewall policy.

C.Disable the RPF check at the FortiGate interface level for the source check

D.Disable strict-arc-check under system settings.

Which timeout setting can be responsible for deleting SSL VPN associated sessions?

A.SSL VPN dtls-hello-timeout

B.SSL VPN idle-timeout

C.SSL VPN login-timeout

D.SSL VPN http-request-body-timeout

Refer to the exhibits.

The SSL VPN connection fails when a user attempts to connect to it. What should the user do to successfully connect to SSL VPN?

A.Change the Server IP address.

B.Change the SSL VPN port on the client.

C.Change the SSL VPN portal to the tunnel.

D.Change the idle-timeout.

Why does FortiGate Keep TCP sessions in the session table for several seconds, even after both sides (client and server) have terminated the session?

A.To allow for out-of-order packets that could arrive after the FIN/ACK packets

B.To finish any inspection operations

C.To remove the NAT operation

D.To generate logs

Other Version: 2663Fortinet.NSE4_FGT-7.2.v2024-07-25.q104; 3026Fortinet.NSE4_FGT-7.2.v2023-04-03.q69

Latest Upload: 143CrowdStrike.CCSE-204.v2026-06-12.q25; 161VMware.2V0-17.25.v2026-06-12.q49; 150Appian.ACA-100.v2026-06-11.q23; 208CompTIA.220-1202.v2026-06-11.q114; 163CheckPoint.156-590.v2026-06-11.q47; 224CompTIA.220-1202.v2026-06-10.q109; 205CertiProf.CEHPC.v2026-06-10.q54; 152Hitachi.HQT-4160.v2026-06-10.q25; 403PMI.PMI-ACP-CN.v2026-06-09.q453; 192Splunk.SPLK-5002.v2026-06-08.q52

Download PDF File