To start preparing for NSE4_FGT-7.2 Fortinet NSE 4 - FortiOS 7.2 exam, you can choose the real Fortinet NSE4_FGT-7.2 exam questions of ITPrepare as the learning materials. ITPrepare provides the highest quality Fortinet NSE4_FGT-7.2 questions for preparation. ITPrepare's Fortinet NSE4_FGT-7.2 exam questions cover all topics. First-time candidates will gain a clear idea of the Fortinet NSE4_FGT-7.2 exam questions and how they can pass NSE4_FGT-7.2 Fortinet NSE 4 - FortiOS 7.2 exam with flying colors.

1. Fortinet
NSE4_FGT-7.
2
Fortinet NSE 4 - FortiOS 7.2

2. R
e
a
l
F
o
r
t
i
n
e
t
N
S
E
4
_
F
G
T
-
7
.
2
E
x
a
m
Q
u
e
s
t
i
o
n
s
-
S
t
a
r
t
P
r
e
p
a
r
i
n
g
F
o
r
N
S
E
4
_
F
G
T
-
7
.
2
E
x
a
m
1. Refer to the exhibit.
Which contains a session diagnostic output.
Which statement is true about the session diagnostic output?
A. The session is in SYN_SENT state.
B. The session is in FIN_ACK state.
C. The session is in FTN_WAIT state.
D. The session is in ESTABLISHED state.
Answer: A
Explanation:
Indicates TCP (proto=6) session in SYN_SENT state (proto=state=2)
https://kb.fortinet.com/kb/viewContent.do?externalId=FD30042
2.Which statement about video filtering on FortiGate is true?
A. Full SSL Inspection is not required.
B. It is available only on a proxy-based firewall policy.
C. It inspects video files hosted on file sharing services.
D. Video filtering FortiGuard categories are based on web filter FortiGuard categories.
Answer: B
Explanation:
Reference: https://docs.fortinet.com/document/fortigate/7.0.0/new-
features/190873/video-filtering
3.Which statement is correct regarding the inspection of some of the services
available by web applications embedded in third-party websites?

3. R
e
a
l
F
o
r
t
i
n
e
t
N
S
E
4
_
F
G
T
-
7
.
2
E
x
a
m
Q
u
e
s
t
i
o
n
s
-
S
t
a
r
t
P
r
e
p
a
r
i
n
g
F
o
r
N
S
E
4
_
F
G
T
-
7
.
2
E
x
a
m
A. The security actions applied on the web applications will also be explicitly applied
on the third-party websites.
B. The application signature database inspects traffic only from the original web
application server.
C. FortiGuard maintains only one signature of each web application that is unique.
D. FortiGate can inspect sub-application traffic regardless where it was originated.
Answer: D
Explanation:
Reference: https://help.fortinet.com/fortiproxy/11/Content/Admin Guides/FPX-
AdminGuide/300_System/303d_FortiG
4.Which statements best describe auto discovery VPN (ADVPN). (Choose two.)
A. It requires the use of dynamic routing protocols so that spokes can learn the routes
to other spokes.
B. ADVPN is only supported with IKEv2.
C. Tunnels are negotiated dynamically between spokes.
D. Every spoke requires a static tunnel to be configured to other spokes so that phase
1 and phase 2 proposals are defined in advance.
Answer: A,C
5.Refer to the exhibit.
Examine the intrusion prevention system (IPS) diagnostic command.
Which statement is correct If option 5 was used with the IPS diagnostic command and
the outcome was a decrease in the CPU usage?
A. The IPS engine was inspecting high volume of traffic.
B. The IPS engine was unable to prevent an intrusion attack .
C. The IPS engine was blocking all traffic.

4. R
e
a
l
F
o
r
t
i
n
e
t
N
S
E
4
_
F
G
T
-
7
.
2
E
x
a
m
Q
u
e
s
t
i
o
n
s
-
S
t
a
r
t
P
r
e
p
a
r
i
n
g
F
o
r
N
S
E
4
_
F
G
T
-
7
.
2
E
x
a
m
D. The IPS engine will continue to run in a normal state.
Answer: A
Explanation:
Reference: https://docs.fortinet.com/document/fortigate/6.2.3/cookbook/232929/troubl
eshooting-high-cpu-usage
6.Which CLI command will display sessions both from client to the proxy and from the
proxy to the servers?
A. diagnose wad session list
B. diagnose wad session list | grep hook-pre&&hook-out
C. diagnose wad session list | grep hook=pre&&hook=out
D. diagnose wad session list | grep "hook=pre"&"hook=out"
Answer: A
7.Refer to the exhibit.
An administrator is running a sniffer command as shown in the exhibit.
Which three pieces of information are included in the sniffer output? (Choose three.)

5. R
e
a
l
F
o
r
t
i
n
e
t
N
S
E
4
_
F
G
T
-
7
.
2
E
x
a
m
Q
u
e
s
t
i
o
n
s
-
S
t
a
r
t
P
r
e
p
a
r
i
n
g
F
o
r
N
S
E
4
_
F
G
T
-
7
.
2
E
x
a
m
A. Interface name
B. Ethernet header
C. IP header
D. Application header
E. Packet payload
Answer: A,C,E
Explanation:
Reference: https://kb.fortinet.com/kb/documentLink .do?externalID=11186
Study Guide C Routing C Diagnostics C Packet Capture Verbosity Level.
# diagnose sniffer packet <interface> ‘<filter>’ <verbosity> <count> <timestamp>
<frame size>
In the example, verbosity is 5.
The verbosity level specifies how much info you want to display.
1 (default): IP Headers.
2: IP Headers, Packet Payload.
8.Which of the following conditions must be met in order for a web browser to trust a
web server certificate signed by a third-party CA?
A. The public key of the web server certificate must be installed on the browser.
B. The web-server certificate must be installed on the browser.
C. The CA certificate that signed the web-server certificate must be installed on the
browser.
D. The private key of the CA certificate that signed the browser certificate must be
installed on the browser.
Answer: C
9.An administrator must disable RPF check to investigate an issue.
Which method is best suited to disable RPF without affecting features like antivirus
and intrusion prevention system?
A. Enable asymmetric routing, so the RPF check will be bypassed.
B. Disable the RPF check at the FortiGate interface level for the source check.
C. Disable the RPF check at the FortiGate interface level for the reply check .
D. Enable asymmetric routing at the interface level.
Answer: B
Explanation:
Reference: https://kb.fortinet.com/kb/documentLink.do?externalID=FD33955
10.Refer to the exhibit.

6. R
e
a
l
F
o
r
t
i
n
e
t
N
S
E
4
_
F
G
T
-
7
.
2
E
x
a
m
Q
u
e
s
t
i
o
n
s
-
S
t
a
r
t
P
r
e
p
a
r
i
n
g
F
o
r
N
S
E
4
_
F
G
T
-
7
.
2
E
x
a
m
The exhibit contains a network diagram, virtual IP, IP pool, and firewall policies
configuration.
The WAN (port1) interface has the IP address 10.200. 1. 1/24.
The LAN (port3) interface has the IP address 10 .0.1.254. /24.
The first firewall policy has NAT enabled using IP Pool.
The second firewall policy is configured with a VIP as the destination address.
Which IP address will be used to source NAT the internet traffic coming from a
workstation with the IP address 10.0.1.10?
A. 10.200.1.1
B. 10.200.3.1
C. 10.200.1.100
D. 10.200.1.10

7. R
e
a
l
F
o
r
t
i
n
e
t
N
S
E
4
_
F
G
T
-
7
.
2
E
x
a
m
Q
u
e
s
t
i
o
n
s
-
S
t
a
r
t
P
r
e
p
a
r
i
n
g
F
o
r
N
S
E
4
_
F
G
T
-
7
.
2
E
x
a
m
Answer: C
Explanation:
Policy 1 is applied on outbound (LAN-WAN) and policy 2 is applied on inbound (WAN-
LAN). question is asking SNAT for outbound traffic so policy 1 will take place and
NAT overload is in effect.
11.Which of the following statements is true regarding SSL VPN settings for an SSL
VPN portal?
A. By default, FortiGate uses WINS servers to resolve names.
B. By default, the SSL VPN portal requires the installation of a client's certificate.
C. By default, split tunneling is enabled.
D. By default, the admin GUI and SSL VPN portal use the same HTTPS port.
Answer: D
12.Refer to the exhibit.
An administrator has configured a performance SLA on FortiGate, which failed to
generate any traffic.
Why is FortiGate not sending probes to 4.2.2.2 and 4.2.2.1 servers? (Choose two.)
A. The Detection Mode setting is not set to Passive.
B. Administrator didn't configure a gateway for the SD-WAN members, or configured
gateway is not valid.

8. R
e
a
l
F
o
r
t
i
n
e
t
N
S
E
4
_
F
G
T
-
7
.
2
E
x
a
m
Q
u
e
s
t
i
o
n
s
-
S
t
a
r
t
P
r
e
p
a
r
i
n
g
F
o
r
N
S
E
4
_
F
G
T
-
7
.
2
E
x
a
m
C. The configured participants are not SD-WAN members.
D. The Enable probe packets setting is not enabled.
Answer: B,D
13.Which feature in the Security Fabric takes one or more actions based on event
triggers?
A. Fabric Connectors
B. Automation Stitches
C. Security Rating
D. Logical Topology
Answer: B
Explanation:
Reference: https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/286973/fortin
et-security-fabric
14.Which two protocol options are available on the CLI but not on the GUI when
configuring an SD-WAN Performance SLA? (Choose two.)
A. DNS
B. ping
C. udp-echo
D. TWAMP
Answer: C,D
15.Which two settings can be separately configured per VDOM on a FortiGate
device? (Choose two.)
A. System time
B. FortiGuaid update servers
C. Operating mode
D. NGFW mode
Answer: C,D
Explanation:
C: "Operating mode is per-VDOM setting. You can combine transparent mode
VDOM's with NAT mode VDOMs on the same physical Fortigate.
D: "Inspection-mode selection has moved from VDOM to firewall policy, and the
default inspection-mode is flow, so NGFW Mode can be changed from Profile-base
(Default) to Policy-base directly in System > Settings from the VDOM" Page 125 of
FortiGate_Infrastructure_6.4_Study_Guide
16.An administrator is running the following sniffer command:

9. R
e
a
l
F
o
r
t
i
n
e
t
N
S
E
4
_
F
G
T
-
7
.
2
E
x
a
m
Q
u
e
s
t
i
o
n
s
-
S
t
a
r
t
P
r
e
p
a
r
i
n
g
F
o
r
N
S
E
4
_
F
G
T
-
7
.
2
E
x
a
m
Which three pieces of Information will be Included in me sniffer output? {Choose
three.)
A. Interface name
B. Packet payload
C. Ethernet header
D. IP header
E. Application header
Answer: A,B,D
17.Refer to the exhibits.

10. R
e
a
l
F
o
r
t
i
n
e
t
N
S
E
4
_
F
G
T
-
7
.
2
E
x
a
m
Q
u
e
s
t
i
o
n
s
-
S
t
a
r
t
P
r
e
p
a
r
i
n
g
F
o
r
N
S
E
4
_
F
G
T
-
7
.
2
E
x
a
m
The exhibits show the SSL and authentication policy (Exhibit A) and the security
policy (Exhibit B) for Facebook.
Users are given access to the Facebook web application. They can play video content
hosted on Facebook but they are unable to leave reactions on videos or other types
of posts.
Which part of the policy configuration must you change to resolve the issue?
A. Make SSL inspection needs to be a deep content inspection.
B. Force access to Facebook using the HTTP service.
C. Get the additional application signatures are required to add to the security policy.
D. Add Facebook in the URL category in the security policy.
Answer: A
Explanation:

11. R
e
a
l
F
o
r
t
i
n
e
t
N
S
E
4
_
F
G
T
-
7
.
2
E
x
a
m
Q
u
e
s
t
i
o
n
s
-
S
t
a
r
t
P
r
e
p
a
r
i
n
g
F
o
r
N
S
E
4
_
F
G
T
-
7
.
2
E
x
a
m
They can play video (tick) content hosted on Facebook, but they are unable to leave
reactions on videos or other types of posts. This indicate that the rule are partially
working as they can watch video but cant react, i.e. liking the content. So must be an
issue with the SSL inspection rather then adding an app rule.
18.1.Refer to the exhibit.
Based on the raw log, which two statements are correct? (Choose two.)
A. Traffic is blocked because Action is set to DENY in the firewall policy.
B. Traffic belongs to the root VDOM.
C. This is a security log.
D. Log severity is set to error on FortiGate.
Answer: A,C
19.When configuring a firewall virtual wire pair policy, which following statement is
true?
A. Any number of virtual wire pairs can be included, as long as the policy traffic
direction is the same.
B. Only a single virtual wire pair can be included in each policy.
C. Any number of virtual wire pairs can be included in each policy, regardless of the
policy traffic direction settings.
D. Exactly two virtual wire pairs need to be included in each policy.
Answer: A
Explanation:
Reference: https://kb.fortinet.com/kb/documentLink .do?externalID=FD48690
20.Examine this PAC file configuration.
Which of the following statements are true? (Choose two.)
A. Browsers can be configured to retrieve this PAC file from the FortiGate.
B. Any web request to the 172.25. 120.0/24 subnet is allowed to bypass the proxy.
C. All requests not made to Fortinet.com or the 172.25. 120.0/24 subnet, have to go
through altproxy.corp.com: 8060.

12. D. Any web request fortinet.com is allowed to bypass the proxy.
Answer: A,D
21.Which statement is correct regarding the use of application control for inspecting
web applications?
A. Application control can identity child and parent applications, and perform different
actions on them.
B. Application control signatures are organized in a nonhierarchical structure.
C. Application control does not require SSL inspection to identity web applications.
D. Application control does not display a replacement message for a blocked web
application.
Answer: A
Explanation:
Application control is a feature that allows FortiGate to inspect and control the use of
specific web applications on the network. When application control is enabled,
FortiGate can identify child and parent applications, and can perform different actions
on them based on the configuration.
Test NSE4_FGT-7.2