[Q32-Q53] 究極のガイド準備問題NSE4_FGT-7.0には正確なPDF解答[2023年09月06日]

新問題 32
Examine this output from a debug flow:

Why did the FortiGate drop the packet?

新問題 33
Which three options are the remote log storage options you can configure on FortiGate? (Choose three.)

新問題 34
Refer to the exhibit.

The exhibit shows proxy policies and proxy addresses, the authentication rule and authentication scheme, users, and firewall address.
An explicit web proxy is configured for subnet range 10.0.1.0/24 with three explicit web proxy policies.
The authentication rule is configured to authenticate HTTP requests for subnet range 10.0.1.0/24 with a form-based authentication scheme for the FortiGate local user database. Users will be prompted for authentication.
How will FortiGate process the traffic when the HTTP request comes from a machine with the source IP
10.0.1.10 to the destination http://www.fortinet.com? (Choose two.)

新問題 35
Which two statements are true about collector agent standard access mode? (Choose two.)

新問題 36
Examine the IPS sensor and DoS policy configuration shown in the exhibit, then answer the question below.

When detecting attacks, which anomaly, signature, or filter will FortiGate evaluate first?

新問題 37
Refer to the exhibit, which contains a static route configuration.

An administrator created a static route for Amazon Web Services.
What CLI command must the administrator use to view the route?

新問題 38
Which two types of traffic are managed only by the management VDOM? (Choose two.)

新問題 39
Which three security features require the intrusion prevention system (IPS) engine to function? (Choose three.)

新問題 40
Which two statements are true when FortiGate is in transparent mode? (Choose two.)

新問題 41
Which two policies must be configured to allow traffic on a policy-based next-generation firewall (NGFW) FortiGate? (Choose two.)

新問題 42
Which three statements about security associations (SA) in IPsec are correct? (Choose three.)

新問題 43
Refer to the exhibit.




The exhibit contains a network diagram, central SNAT policy, and IP pool configuration.
The WAN (port1) interface has the IP address 10.200.1.1/24.
The LAN (port3) interface has the IP address 10.0.1.254/24.
A firewall policy is configured to allow to destinations from LAN (port3) to WAN (port1).
Central NAT is enabled, so NAT settings from matching Central SNAT policies will be applied.
Which IP address will be used to source NAT the traffic, if the user on Local-Client (10.0.1.10) pings the IP address of Remote-FortiGate (10.200.3.1)?

新問題 44
NGFW mode allows policy-based configuration for most inspection rules. Which security profile’s configuration does not change when you enable policy-based inspection?

新問題 45
Refer to the exhibit, which contains a session diagnostic output.

Which statement is true about the session diagnostic output?

新問題 46
Which three statements are true regarding session-based authentication? (Choose three.)

新問題 47
What types of traffic and attacks can be blocked by a web application firewall (WAF) profile? (Choose three.)

新問題 48
Refer to the exhibit, which contains a radius server configuration.

An administrator added a configuration for a new RADIUS server. While configuring, the administrator selected the Include in every user group option.
What will be the impact of using Include in every user group option in a RADIUS configuration?

新問題 49
Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

新問題 50
Refer to the exhibit.

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up. but phase 2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, what configuration change will bring phase 2 up?

新問題 51
An administrator has configured the following settings:

新問題 52
An administrator needs to configure VPN user access for multiple sites using the same soft FortiToken. Each site has a FortiGate VPN gateway.
What must an administrator do to achieve this objective?

新問題 53
Refer to the exhibit, which contains a session diagnostic output.

Which statement is true about the session diagnostic output?