購入前に中身を確かめたい方は、GoShikenの無料サンプルをご活用ください。NSE4_FGT-7.2（Fortinet NSE 4 - FortiOS 7.2）の問題集は、実際の問題形式や解答の質をご確認いただいてからご購入いただけます。

Fortinet NSE4_FGT-7.2 試験概要:

Fortinet NSE4_FGT-7.2 試験シラバストピック:

Fortinet NSE 4 - FortiOS 7.2のよくある疑問を解決します

Fortinet NSE 4 - FortiOS 7.2 認定 NSE4_FGT-7.2 試験問題：

問題 #1

How does FortiGate act when using SSL VPN in web mode?

A. FortiGate acts as DNS server.
B. FortiGate acts as an FDS server.
C. FortiGate acts as an HTTP reverse proxy.
D. FortiGate acts as router.

問題 #2

Which of the following are purposes of NAT traversal in IPsec? (Choose two.)

A. To dynamically change phase 1 negotiation mode aggressive mode.
B. To force a new DH exchange with each phase 2 rekey.
C. To detect intermediary NAT devices in the tunnel path.
D. To encapsulation ESP packets in UDP packets using port 4500.

問題 #3

Consider the topology:
Application on a Windows machine <--{SSL VPN} -->FGT--> Telnet to Linux server.
An administrator is investigating a problem where an application establishes a Telnet session to a Linux server over the SSL VPN through FortiGate and the idle session times out after about 90 minutes. The administrator would like to increase or disable this timeout.
The administrator has already verified that the issue is not caused by the application or Linux server. This issue does not happen when the application establishes a Telnet connection to the Linux server directly on the LAN.
What two changes can the administrator make to resolve the issue without affecting services running through FortiGate? (Choose two.)

A. Set the maximum session TTL value for the TELNET service object.
B. Create a new firewall policy and place it above the existing SSLVPN policy for the SSL VPN traffic, and set the new TELNET service object in the policy.
C. Set the session TTL on the SSLVPN policy to maximum, so the idle session timeout will not happen after 90 minutes.
D. Create a new service object for TELNET and set the maximum session TTL.

問題 #4

An administrator wants to configure Dead Peer Detection (DPD) on IPSEC VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when no traffic is observed in the tunnel.
Which DPD mode on FortiGate will meet the above requirement?

A. On Demand
B. Enabled
C. On Idle
D. Disabled

問題 #5

Which three CLI commands can you use to troubleshoot Layer 3 issues if the issue is in neither the physical layer nor the link layer? (Choose three.)

A. diagnose sys top
B. diagnose sniffer packet any
C. execute ping
D. get system arp
E. execute traceroute

解説：