Get Ready to Pass the NSE4_FGT-7.0 exam Right Now Using Our Fortinet NSE 4 Exam Package [Q81-Q104]

NEW QUESTION 81
Refer to the exhibits to view the firewall policy (Exhibit A) and the antivirus profile (Exhibit B).


Which statement is correct if a user is unable to receive a block replacement message when downloading an infected file for the first time?

NEW QUESTION 82
By default, FortiGate is configured to use HTTPS when performing live web filtering with FortiGuard servers.
Which CLI command will cause FortiGate to use an unreliable protocol to communicate with FortiGuard servers for live web filtering?

NEW QUESTION 83
Refer to the exhibit.

The exhibit shows proxy policies and proxy addresses, the authentication rule and authentication scheme, users, and firewall address.
An explicit web proxy is configured for subnet range 10.0.1.0/24 with three explicit web proxy policies.
The authentication rule is configured to authenticate HTTP requests for subnet range 10.0.1.0/24 with a form-based authentication scheme for the FortiGate local user database. Users will be prompted for authentication.
How will FortiGate process the traffic when the HTTP request comes from a machine with the source IP
10.0.1.10 to the destination http://www.fortinet.com? (Choose two.)

NEW QUESTION 84
Refer to the exhibit.

Given the interfaces shown in the exhibit. which two statements are true? (Choose two.)

NEW QUESTION 85
Refer to the exhibit.

Based on the raw log, which two statements are correct? (Choose two.)

NEW QUESTION 86
FortiGuard categories can be overridden and defined in different categories. To create a web rating override for example.com home page, the override must be configured using a specific syntax.
Which two syntaxes are correct to configure web rating for the home page? (Choose two.)

NEW QUESTION 87
What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?

NEW QUESTION 88
An administrator is configuring an IPsec VPN between site A and site B.
The Remote Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192.168.1.0/24 and the remote quick mode selector is 192.168.2.0/24.
Which subnet must the administrator configure for the local quick mode selector for site B?

NEW QUESTION 89
Which three statements are true regarding session-based authentication? (Choose three.)

NEW QUESTION 90
Which statement is correct regarding the inspection of some of the services available by web applications embedded in third-party websites?

NEW QUESTION 91
An organization’s employee needs to connect to the office through a high-latency internet connection.
Which SSL VPN setting should the administrator adjust to prevent the SSL VPN negotiation failure?

NEW QUESTION 92
How does FortiGate act when using SSL VPN in web mode?

NEW QUESTION 93
Which three statements are true regarding session-based authentication? (Choose three.)

NEW QUESTION 94
An organization’s employee needs to connect to the office through a high-latency internet connection.
Which SSL VPN setting should the administrator adjust to prevent the SSL VPN negotiation failure?

NEW QUESTION 95
Which statements are true regarding firewall policy NAT using the outgoing interface IP address with fixed port disabled? (Choose two.)

NEW QUESTION 96
Refer to the exhibit.


The exhibit contains the configuration for an SD-WAN Performance SLA, as well as the output of diagnose sys virtual-wan-link health-check.
Which interface will be selected as an outgoing interface?

NEW QUESTION 97
Refer to the exhibit to view the application control profile.

Based on the configuration, what will happen to Apple FaceTime?

NEW QUESTION 98
A network administrator has enabled SSL certificate inspection and antivirus on FortiGate. When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the file. When downloading the same file through HTTPS, FortiGate does not detect the virus and the file can be downloaded.
What is the reason for the failed virus detection by FortiGate?

NEW QUESTION 99
An administrator needs to configure VPN user access for multiple sites using the same soft FortiToken. Each site has a FortiGate VPN gateway.
What must an administrator do to achieve this objective?

NEW QUESTION 100
An administrator wants to configure Dead Peer Detection (DPD) on IPSEC VPN for detecting dead tunnels.
The requirement is that FortiGate sends DPD probes only when no traffic is observed in the tunnel.
Which DPD mode on FortiGate will meet the above requirement?

NEW QUESTION 101
An organization’s employee needs to connect to the office through a high-latency internet connection.
Which SSL VPN setting should the administrator adjust to prevent the SSL VPN negotiation failure?

NEW QUESTION 102
Refer to the exhibit.

The exhibits show a network diagram and the explicit web proxy configuration.
In the command diagnose sniffer packet, what filter can you use to capture the traffic between the client and the explicit web proxy?

NEW QUESTION 103
Which statement about video filtering on FortiGate is true?

NEW QUESTION 104
Which two protocols are used to enable administrator access of a FortiGate device? (Choose two.)