NSE4_FGT-7.0試験無料問題集（175題）「Fortinet NSE 4

出題：1

Which three statements about security associations (SA) in IPsec are correct? (Choose three.)

A. A phase 1 SA is bidirectional, while a phase 2 SA is directional.

B. Phase 2 SA expiration can be time-based, volume-based, or both.

C. An SA never expires.

D. Both the phase 1 SA and phase 2 SA are bidirectional.

E. Phase 2 SAs are used for encrypting and decrypting the data exchanged through the tunnel.

正解：A,B,E 解答を投票する

出題：2

Which two actions can you perform only from the root FortiGate in a Security Fabric? (Choose two.)

A. Log in to a downstream FortiSwitch device.

B. Disable FortiAnalyzer logging for a downstream FortiGate device.

C. Ban or unban compromised hosts.

D. Shut down/reboot a downstream FortiGate device.

正解：B,D 解答を投票する

出題：3

Refer to the exhibit.

The Root and To_Internet VDOMs are configured in NAT mode. The DMZ and Local VDOMs are configured in transparent mode.
The Root VDOM is the management VDOM. The To_Internet VDOM allows LAN users to access the internet. The To_Internet VDOM is the only VDOM with internet access and is directly connected to ISP modem.
With this configuration, which statement is true?

A. Inter-VDOM links are required to allow traffic between the Local and Root VDOMs.

B. A static route is required on the To_Internet VDOM to allow LAN users to access the internet.

C. Inter-VDOM links are not required between the Root and To_Internet VDOMs because the Root VDOM is used only as a management VDOM.

D. Inter-VDOM links are required to allow traffic between the Local and DMZ VDOMs.

正解：A 解答を投票する

出題：4

Which of the following statements about central NAT are true? (Choose two.)

A. Central NAT can be enabled or disabled from the CLI only.

B. Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall.

C. Source NAT, using central NAT, requires at least one central SNAT policy.

D. IP tool references must be removed from existing firewall policies before enabling central NAT.

正解：A,D 解答を投票する

出題：5

Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy-based inspection mode? (Choose two.)

A. Allow

B. Warning

C. Exempt

D. Learn

正解：A,B 解答を投票する

出題：6

Which two statements are true when FortiGate is in transparent mode? (Choose two.)

A. Static routes are required to allow traffic to the next hop.

B. By default, all interfaces are part of the same broadcast domain.

C. FortiGate forwards frames without changing the MAC address.

D. The existing network IP schema must be changed when installing a transparent mode.

正解：B,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Which two protocol options are available on the CLI but not on the GUI when configuring an SD-WAN Performance SLA? (Choose two.)

A. udp-echo

B. ping

C. TWAMP

D. DNS

正解：A,C 解答を投票する

出題：8

An administrator is configuring an IPsec VPN between site A and site B.
The Remote Gateway setting in both sites has been configured as Static IP Address.
For site A, the local quick mode selector is 192.168.1.0/24 and the remote quick mode selector is 192.168.2.0/24.
Which subnet must the administrator configure for the local quick mode selector for site B?

A. 192.168.3.0/24

B. 192.168.2.0/24

C. 192.168.1.0/24

D. 192.168.0.0/24

正解：B 解答を投票する

出題：9

Which statements are true regarding firewall policy NAT using the outgoing interface IP address with fixed port disabled? (Choose two.)

A. Connections are tracked using source port and source MAC address.

B. Port address translation is not used.

C. Source IP is translated to the outgoing interface IP.

D. This is known as many-to-one NAT.

正解：B,C 解答を投票する

NSE4_FGT-7.0試験無料問題集「Fortinet NSE 4 - FortiOS 7.0 認定」