Free Preparation Discussions
MENU
Fortinet NSE4_FGT-7.2 Exam Questions
- Fortinet Certified Professional Certifications
- Fortinet FCP Fortinet Certified Professional Security Operations Certifications
- Topic 1: Deployment and System Configuration: Perform initial configuration: This section of the exam covers using the Fortinet Security Fabric and configuring log settings as well as solving connectivity issues.
- Topic 2: Firewall and authentication: This section of the exam covers configuring firewall policies and how to set up the firewall policy NAT and central NAT.
- Topic 3: Content inspection: This section of the exam covers how to Inspect encrypted traffic using certificates and figuring out FortiGate inspection modes. It also covers setting up application control to check various applications such as antivirus.
- Topic 4: Routing: This section covers the setting up of routing packets by utilizing static and policy-based routes.
- Topic 5: VPN: This section covers setting up and adopting different SSL VPN modes and how to configure ZTNA.
Free Fortinet NSE4_FGT-7.2 Exam Actual Questions
Note: Premium Questions for NSE4_FGT-7.2 were last updated On 20-08-2024 (see below)
Refer to the exhibit.
An administrator is running a sniffer command as shown in the exhibit.
Which three pieces of information are included in the sniffer output? (Choose three.)
Study Guide -- Routing -- Diagnostics -- Packet Capture Verbosity Level.
# diagnose sniffer packet <interface> '<filter>' <verbosity> <count> <timestamp> <frame size>
In the example, verbosity is 5.
The verbosity level specifies how much info you want to display.
1 (default): IP Headers.
2: IP Headers, Packet Payload.
3. IP Headers, Packet Payload, Ethernet Headers.
4: IP Headers, Interface Name.
5: IP Headers, Packet Payload, Interface Name.
6: IP Headers, Packet Payload, Ethernet Headers, Interface Name.
Which engine handles application control traffic on the next-generation firewall (NGFW) FortiGate?
Refer to the exhibits.
Exhibit A shows system performance output. Exhibit B shows a FortiGate configured with the default configuration of high memory usage thresholds. Based on the system performance output, which two statements are correct? (Choose two.)
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Conserve-mode-changes/ta-p/198502
configurable thresholds
Though it is recommended to keep the default memory threshold, a new CLI command has been added to allow administrators to adjust the thresholds.
Default values are :
- red : 88% of total memory is considered 'used memory'
- extreme : 95% of total memory is considered 'used memory'
- green : 82% of total memory is considered 'used memory'
What are two scanning techniques supported by FortiGate? (Choose two.)
FortiGate Security 7.2 Study Guide (p.341):
'Like viruses, which use many methods to avoid detection, FortiGate uses many techniques to detect viruses. These detection techniques include:
* Antivirus scan
* Grayware scan
* Machine learning (AI) scan
If all antivirus features are enabled, FortiGate applies the following scanning order: antivirus scan, followed by grayware scan, followed by AI scan.'
What is the effect of enabling auto-negotiate on the phase 2 configuration of an IPsec tunnel?
https://kb.fortinet.com/kb/documentLink.do?externalID=12069
FortiGate Infrastructure 7.2 Study Guide (p.264): '...then FortiGate might drop interesting traffic because of the absence of active SAs. To prevent this, you can enable Auto-negotiate. When you do this, FortiGate not only negotiates new SAs before the current SAs expire, but it also starts using the new SAs right away.' 'Another benefit of enabling Auto-negotiate is that the tunnel comes up and stays up automatically, even when there is no interesting traffic. When you enable Autokey Keep Alive and keep Auto-negotiate disabled, the tunnel does not come up automatically unless there is interesting traffic. However, after the tunnel is up, it stays that way because FortiGate periodically sends keep alive packets over the tunnel. Note that when you enable Auto-negotiate, Autokey Keep Alive is implicitly enabled.'
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Arthur
8 months agoMarisha
9 months agoLonny
10 months agoJeanice
10 months agoKeva
10 months agoSherman
10 months agoFernanda
10 months agoFlorinda
10 months agoKattie
11 months ago