Fortinet NSE4_FGT-7.2 Dumps in PDF and Online

QUESTION: 16

Refer to the exhibit.

Given the interfaces shown in the exhibit. which two statements are true? (Choose two.)

Traffic between port2 and port2-vlan1 is allowed by default.
port1-vlan10 and port2-vlan10 are part of the same broadcast domain.
port1 is a native VLAN.
port1-vlan and port2-vlan1 can be assigned in the same VDOM or to different VDOMs.

Answer(s): C,D

Explanation:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-rules-about-VLAN-configuration-and- VDOM-interf https://kb.fortinet.com/kb/viewContent.do?externalId=FD30883

Reveal Solution Next Question

QUESTION: 17

Which statement about video filtering on FortiGate is true?

Full SSL Inspection is not required.
It is available only on a proxy-based firewall policy.
It inspects video files hosted on file sharing services.
Video filtering FortiGuard categories are based on web filter FortiGuard categories.

Answer(s): B

Reference:

https://docs.fortinet.com/document/fortigate/7.0.0/new-features/190873/video-filtering

Reveal Solution Next Question

QUESTION: 18

Refer to the exhibit.

Given the security fabric topology shown in the exhibit, which two statements are true? (Choose two.)

There are five devices that are part of the security fabric.
Device detection is disabled on all FortiGate devices.
This security fabric topology is a logical topology view.
There are 19 security recommendations for the security fabric.

Answer(s): C,D

Reference:

https://docs.fortinet.com/document/fortigate/5.6.0/cookbook/761085/results https://docs.fortinet.com/document/fortimanager/6.2.0/new-features/736125/security-fabric- topology

Reveal Solution Next Question

A network administrator has enabled SSL certificate inspection and antivirus on FortiGate.
When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the file.
When downloading the same file through HTTPS, FortiGate does not detect the virus and the file can be downloaded.
What is the reason for the failed virus detection by FortiGate?

The website is exempted from SSL inspection.
The EICAR test file exceeds the protocol options oversize limit.
The selected SSL inspection profile has certificate inspection enabled.
The browser does not trust the FortiGate self-signed CA certificate.

Answer(s): A,C

Explanation:

SSL Inspection Profile, on the Inspection method there are 2 options to choose from, SSL Certificate Inspection or Full SSL Inspection. FG SEC 7.2 Studi Guide: Full SSL Inspection level is the only choice that allows antivirus to be effective.

Reveal Solution Next Question

QUESTION: 20

Refer to the exhibits.

Exhibit A shows system performance output. Exhibit B shows a FortiGate configured with the default configuration of high memory usage thresholds. Based on the system performance output, which two statements are correct? (Choose two.)

Administrators can access FortiGate only through the console port.
FortiGate has entered conserve mode.
FortiGate will start sending all files to FortiSandbox for inspection.
Administrators cannot change the configuration.

Answer(s): B,D

Reference:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Conserve-mode-changes/ta- p/198502

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Conserve-mode-changes/ta-p/198502

configurable thresholds
Though it is recommended to keep the default memory threshold, a new CLI command has been added to allow administrators to adjust the thresholds.

Default values are :
- red : 88% of total memory is considered "used memory"
- extreme : 95% of total memory is considered "used memory"
- green : 82% of total memory is considered "used memory"

Reveal Solution Next Question

Fortinet NSE 4 - FortiOS 7.2 NSE4_FGT-7.2 Dumps in PDF

Free Fortinet NSE4_FGT-7.2 Real Questions (page: 4)

QUESTION: 16

Explanation:

QUESTION: 17

Reference:

QUESTION: 18

Reference:

QUESTION: 19

Explanation:

QUESTION: 20

Reference: