NSE4_FGT-7.2試験無料問題集（183題）「Fortinet NSE 4

出題：1

Which two statements describe how the RPF check is used? (Choose two.)

A. The RPF check is run on the first sent packet of any new session.

B. The RPF check is run on the first reply packet of any new session.

C. The RPF check is run on the first sent and reply packet of any new session.

D. The RPF check is a mechanism that protects FortiGate and the network from IP spoofing attacks.

正解：A,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

What is the effect of enabling auto-negotiate on the phase 2 configuration of an IPsec tunnel?

A. FortiGate automatically negotiates different local and remote addresses with the remote peer.

B. FortiGate automatically negotiates a new security association after the existing security association expires.

C. FortiGate automatically negotiates different encryption and authentication algorithms with the remote peer.

D. FortiGate automatically brings up the IPsec tunnel and keeps it up, regardless of activity on the IPsec tunnel.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Which of statement is true about SSL VPN web mode?

A. The tunnel is up while the client is connected.

B. The external network application sends data through the VPN.

C. It assigns a virtual IP address to the client.

D. It supports a limited number of protocols.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Examine this FortiGate configuration:

How does the FortiGate handle web proxy traffic coming from the IP address 10.2.1.200 that requires authorization?

A. It always authorizes the traffic without requiring authentication.

B. It authenticates the traffic using the authentication scheme SCHEME1.

C. It authenticates the traffic using the authentication scheme SCHEME2.

D. It drops the traffic.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Which two protocol options are available on the CLI but not on the GUI when configuring an SD-WAN Performance SLA? (Choose two.)

A. udp-echo

B. ping

C. TWAMP

D. DNS

正解：A,C 解答を投票する

出題：6

FortiGuard categories can be overridden and defined in different categories. To create a web rating override for example.com home page, the override must be configured using a specific syntax.
Which two syntaxes are correct to configure web rating for the home page? (Choose two.)

A. www.example.com

B. www.example.com:443

C. example.com

D. www.example.com/index.html

正解：A,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Refer to the exhibit.
An administrator added a configuration for a new RADIUS server. While configuring, the administrator selected the Include in every user group option.

What is the impact of using the Include in every user group option in a RADIUS configuration?

A. This option places all FortiGate users and groups required to authenticate into the RADIUS server, which, in this case, is FortiAuthenticator.

B. This option places all users into every RADIUS user group, including groups that are used for the LDAP server on FortiGate.

C. This option places the RADIUS server, and all users who can authenticate against that server, into every FortiGate user group.

D. This option places the RADIUS server, and all users who can authenticate against that server, into every RADIUS group.

正解：C 解答を投票する

出題：8

Refer to the exhibit.

Which contains a network diagram and routing table output.
The Student is unable to access Webserver.
What is the cause of the problem and what is the solution for the problem?

A. The first reply packet for Student failed the RPF check.
This issue can be resolved by adding a static route to 10.0.4.0/24 through wan1.

B. The first reply packet for Student failed the RPF check .
This issue can be resolved by adding a static route to 203.0. 114.24/32 through port3.

C. The first packet sent from Student failed the RPF check.
This issue can be resolved by adding a static route to 203.0. 114.24/32 through port3.

D. The first packet sent from Student failed the RPF check.
This issue can be resolved by adding a static route to 10.0.4.0/24 through wan1.

正解：C 解答を投票する

出題：9

Refer to the exhibit.

Which contains a session list output. Based on the information shown in the exhibit, which statement is true?

A. Port block allocation IP pool is used in the firewall policy.

B. One-to-one NAT IP pool is used in the firewall policy.

C. Overload NAT IP pool is used in the firewall policy.

D. Destination NAT is disabled in the firewall policy.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

Which three CLI commands can you use to troubleshoot Layer 3 issues if the issue is in neither the physical layer nor the link layer? (Choose three.)

A. diagnose sys top

B. diagnose sniffer packet any

C. execute ping

D. get system arp

E. execute traceroute

正解：B,C,E 解答を投票する

出題：11

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

A. The firmware image must be manually uploaded to each FortiGate.

B. Traffic load balancing is temporally disabled while upgrading the firmware.

C. Uninterruptable upgrade is enabled by default.

D. Only secondary FortiGate devices are rebooted.

正解：B,C 解答を投票する

出題：12

Refer to the exhibits.
Exhibit A shows a network diagram. Exhibit B shows the firewall policy configuration and a VIP object configuration.
The WAN (port1) interface has the IP address 10.200.1.1/24.
The LAN (port3) interface has the IP address 10.0.1.254/24.
The administrator disabled the WebServer firewall policy.

Which IP address will be used to source NAT the traffic, if a user with address 10.0.1.10 connects over SSH to the host with address 10.200.3.1?

A. 10.200.1.1

B. 10.200.1.10

C. 10.0.1.254

D. 10.200.3.1

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：13

Examine this PAC file configuration.
Which of the following statements are true? (Choose two.)

A. Any web request to the 172.25. 120.0/24 subnet is allowed to bypass the proxy.

B. Any web request fortinet.com is allowed to bypass the proxy.

C. All requests not made to Fortinet.com or the 172.25. 120.0/24 subnet, have to go through altproxy.corp.com: 8060.

D. Browsers can be configured to retrieve this PAC file from the FortiGate.

正解：B,D 解答を投票する

NSE4_FGT-7.2試験無料問題集「Fortinet NSE 4 - FortiOS 7.2 認定」