Amazon
Avaya
Cisco
CompTIA
CrowdStrike
EC-Council
EXIN
Fortinet
Google
ISC
ISC2
ITIL
Juniper
Microsoft
NVIDIA
Okta
Palo Alto Networks
Salesforce
SAP
ServiceNow
All Vendors

Fortinet NSE 4 - FortiOS 7.2 NSE4_FGT-7.2 Exam Questions in PDF

Free Fortinet NSE4_FGT-7.2 Dumps Questions (page: 22)

NSE4_FGT-7.2 PDF — 174 Questions

An administrator is configuring an IPsec VPN between site A and site B. The Remote Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192. 168. 1.0/24 and the remote quick mode selector is 192. 168.2.0/24.
Which subnet must the administrator configure for the local quick mode selector for site B?

  1. 192. 168. 1.0/24
  2. 192. 168.0.0/24
  3. 192. 168.2.0/24
  4. 192. 168.3.0/24

Answer(s): C

Explanation:

For an IPsec VPN between site A and site B, the administrator has configured the local quick mode selector for site A as 192.168.1.0/24 and the remote quick mode selector as 192.168.2.0/24. This means that the VPN will allow traffic to and from the 192.168.1.0/24 subnet at site A to reach the

192.168.2.0/24 subnet at site B.

To complete the configuration, the administrator must configure the local quick mode selector for site B. To do this, the administrator must use the same subnet as the remote quick mode selector for site A, which is 192.168.2.0/24. This will allow traffic to and from the 192.168.2.0/24 subnet at site B to reach the 192.168.1.0/24 subnet at site A.

Therefore, the administrator must configure the local quick mode selector for site B as 192.168.2.0/24.



Which two statements are true about the FGCP protocol? (Choose two.)

  1. FGCP elects the primary FortiGate device.
  2. FGCP is not used when FortiGate is in transparent mode.
  3. FGCP runs only over the heartbeat links.
  4. FGCP is used to discover FortiGate devices in different HA groups.

Answer(s): A,C

Explanation:

The FGCP (FortiGate Clustering Protocol) is a protocol that is used to manage high availability (HA) clusters of FortiGate devices. It performs several functions, including the following:

FGCP elects the primary FortiGate device: In an HA cluster, FGCP is used to determine which FortiGate device will be the primary device, responsible for handling traffic and making decisions about what to allow or block. FGCP uses a variety of factors, such as the device's priority, to determine which device should be the primary.

FGCP runs only over the heartbeat links: FGCP communicates between FortiGate devices in the HA cluster using the heartbeat links. These are dedicated links that are used to exchange status and control information between the devices. FGCP does not run over other types of links, such as data links.


Reference:

https://docs.fortinet.com/document/fortigate/6.4.0/ports-and-protocols/564712/fgcp-fortigate- clustering-protocol

FortiGate Infrastructure 7.2 Study Guide (p.292): "FortiGate HA uses the Fortinet-proprietary FortiGate Clustering Protocol (FGCP) to discover members, elect the primary FortiGate, synchronize data among members, and monitor the health of members. To discover and monitor members, the members broadcast heartbeat packets over all configured heartbeat interfaces."



Which two attributes are required on a certificate so it can be used as a CA certificate on SSL Inspection? (Choose two.)

  1. The keyUsage extension must be set to keyCertSign.
  2. The common name on the subject field must use a wildcard name.
  3. The issuer must be a public CA.
  4. The CA extension must be set to TRUE.

Answer(s): A,D

Explanation:

"In order for FortiGate to act in these roles, its CA certificate must have the basic constraints extension set to cA=True and the value of the keyUsage extension set to keyCertSign."


Reference:

https://www.reddit.com/r/fortinet/comments/c7j6jg/recommended_ssl_cert/



Which two inspection modes can you use to configure a firewall policy on a profile-based next- generation firewall (NGFW)? (Choose two.)

  1. Proxy-based inspection
  2. Certificate inspection
  3. Flow-based inspection
  4. Full Content inspection

Answer(s): A,C



Refer to the exhibit.



The Root and To_Internet VDOMs are configured in NAT mode. The DMZ and Local VDOMs are configured in transparent mode.
The Root VDOM is the management VDOM. The To_Internet VDOM allows LAN users to access the internet. The To_Internet VDOM is the only VDOM with internet access and is directly connected to ISP modem .

With this configuration, which statement is true?

  1. Inter-VDOM links are required to allow traffic between the Local and Root VDOMs.
  2. A static route is required on the To_Internet VDOM to allow LAN users to access the internet.
  3. Inter-VDOM links are required to allow traffic between the Local and DMZ VDOMs.
  4. Inter-VDOM links are not required between the Root and To_Internet VDOMs because the Root VDOM is used only as a management VDOM.

Answer(s): A


Reference:

https://kb.fortinet.com/kb/documentLink .do?externalID=FD46542



Viewing page 22 of 36

Share your comments for Fortinet NSE4_FGT-7.2 exam with other users:

O
oliverjames
10/24/2023 5:37:00 AM

my experience was great with this site as i studied for the ms-900 from here and got 900/1000 on the test. my main focus was on the tutorials which were provided and practice questions. thanks!

GERMANY
B
Bhuddhiman
7/20/2023 11:52:00 AM

great course

UNITED STATES
A
Anuj
1/14/2024 4:07:00 PM

very good question

Anonymous
S
Saravana Kumar TS
12/8/2023 9:49:00 AM

question: 93 which statement is true regarding the result? sales contain 6 columns and values contain 7 columns so c is not right answer.

INDIA
L
Lue
3/30/2023 11:43:00 PM

highly recommend just passed my exam.

CANADA
D
DC
1/7/2024 10:17:00 AM

great practice! thanks

UNITED STATES
A
Anonymus
11/9/2023 5:41:00 AM

anyone who wrote this exam recently?

SOUTH AFRICA
K
Khalid Javid
11/17/2023 3:46:00 PM

kindly share the dump

Anonymous
N
Na
8/9/2023 8:39:00 AM

could you please upload cfe fraud prevention and deterrence questions? it will be very much helpful.

Anonymous
S
shime
10/23/2023 10:03:00 AM

this is really very very helpful for mcd level 1

ETHIOPIA
V
Vnu
6/3/2023 2:39:00 AM

very helpful!

Anonymous
S
Steve
8/17/2023 2:19:00 PM

question #18s answer should be a, not d. this should be corrected. it should be minvalidityperiod

CANADA
R
RITEISH
12/24/2023 4:33:00 AM

thanks for the exact solution

Anonymous
S
SB
10/15/2023 7:58:00 AM

need to refer the questions and have to give the exam

INDIA
M
Mike Derfalem
7/16/2023 7:59:00 PM

i need it right now if it was possible please

Anonymous
I
Isak
7/6/2023 3:21:00 AM

i need it very much please share it in the fastest time.

Anonymous
M
Maria
6/23/2023 11:40:00 AM

correct answer is d for student.java program

IRELAND
N
Nagendra Pedipina
7/12/2023 9:10:00 AM

q:37 c is correct

INDIA
J
John
9/16/2023 9:37:00 PM

q6 exam topic: terramearth, c: correct answer: copy 1petabyte to encrypted usb device ???

GERMANY
S
SAM
12/4/2023 12:56:00 AM

explained answers

INDIA
A
Andy
12/26/2023 9:35:00 PM

plan to take theaws certified developer - associate dva-c02 in the next few weeks

SINGAPORE
S
siva
5/17/2023 12:32:00 AM

very helpfull

Anonymous
M
mouna
9/27/2023 8:53:00 AM

good questions

Anonymous
B
Bhavya
9/12/2023 7:18:00 AM

help to practice csa exam

Anonymous
M
Malik
9/28/2023 1:09:00 PM

nice tip and well documented

Anonymous
R
rodrigo
6/22/2023 7:55:00 AM

i need the exam

Anonymous
D
Dan
6/29/2023 1:53:00 PM

please upload

Anonymous
A
Ale M
11/22/2023 6:38:00 PM

prepping for fsc exam

AUSTRALIA
A
ahmad hassan
9/6/2023 3:26:00 AM

pd1 with great experience

Anonymous
Ž
Žarko
9/5/2023 3:35:00 AM

@t it seems like azure service bus message quesues could be the best solution

UNITED KINGDOM
S
Shiji
10/15/2023 1:08:00 PM

helpful to check your understanding.

INDIA
D
Da Costa
8/27/2023 11:43:00 AM

question 128 the answer should be static not auto

Anonymous
B
bot
7/26/2023 6:45:00 PM

more comments here

UNITED STATES
K
Kaleemullah
12/31/2023 1:35:00 AM

great support to appear for exams

Anonymous
AI Tutor 👋 I’m here to help!