NSE4_FGT-7.0 Exam Questions and Answers

QUESTION: 26

Why does FortiGate keep TCP sessions in the session table for several seconds, even after both sides (client and server) have terminated the session?

To allow for out-of-order packets that could arrive after the FIN/ACK packets
To finish any inspection operations
To generate logs
To remove the NAT operation

Answer(s): A

Explanation:

TCP provides the ability for one end of a connection to terminate its output while still receiving data from the other end. This is called a half-close. FortiGate unit implements a specific timer before removing an entry in the firewall session table.

Reveal Solution Next Question

QUESTION: 27

Refer to the exhibit.

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.

Based on the phase 2 configuration shown in the exhibit, what configuration change will bring phase 2 up?

On HQ-FortiGate, enable Auto-negotiate.
On HQ-FortiGate, enable Diffie-Hellman Group 2.
On HQ-FortiGate, set Encryption to AES256.
On Remote-FortiGate, set Seconds to 43200.

Answer(s): C

Explanation:

Encryption and authentication algorithm needs to match in order for IPSEC be successfully established.

Reveal Solution Next Question

QUESTION: 28

Refer to the exhibit.

Examine the intrusion prevention system (IPS) diagnostic command.

Which statement is correct if option 5 was used with the IPS diagnostic command and the outcome was a decrease in the CPU usage?