NSE4_FGT-7.0 Free Practice Test

- (Exam Topic 2)
Examine the IPS sensor configuration shown in the exhibit, and then answer the question below.


An administrator has configured the WINDOWS_SERVERS IPS sensor in an attempt to determine
whether the influx of HTTPS traffic is an attack attempt or not. After applying the IPS sensor, FortiGate is still not generating any IPS logs for the HTTPS traffic.
What is a possible reason for this?

1. A. The IPS filter is missing the Protocol: HTTPS option.
2. B. The HTTPS signatures have not been added to the sensor.
3. C. A DoS policy should be used, instead of an IPS sensor.
4. D. A DoS policy should be used, instead of an IPS sensor.
5. E. The firewall policy is not using a full SSL inspection profile.

Correct Answer: E

- (Exam Topic 2)
Refer to the exhibit.



The exhibit contains a network interface configuration, firewall policies, and a CLI console configuration. How will FortiGate handle user authentication for traffic that arrives on the LAN interface?

1. A. If there is a full-through policy in place, users will not be prompted for authentication.
2. B. Users from the Sales group will be prompted for authentication and can authenticate successfully with the correct credentials.
3. C. Authentication is enforced at a policy level; all users will be prompted for authentication.
4. D. Users from the HR group will be prompted for authentication and can authenticate successfully with the correct credentials.

Correct Answer: C

- (Exam Topic 2)
Which two VDOMs are the default VDOMs created when FortiGate is set up in split VDOM mode? (Choose two.)

1. A. FG-traffic
2. B. Mgmt
3. C. FG-Mgmt
4. D. Root

Correct Answer: AD
Reference: https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/758820/split-task-vdom-mode

- (Exam Topic 2)
Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?

1. A. The public key of the web server certificate must be installed on the browser.
2. B. The web-server certificate must be installed on the browser.
3. C. The CA certificate that signed the web-server certificate must be installed on the browser.
4. D. The private key of the CA certificate that signed the browser certificate must be installed on the browser.

Correct Answer: C

- (Exam Topic 2)
Refer to the exhibit.

Based on the administrator profile settings, what permissions must the administrator set to run the diagnose firewall auth list CLI command on FortiGate?

1. A. Custom permission for Network
2. B. Read/Write permission for Log & Report
3. C. CLI diagnostics commands permission
4. D. Read/Write permission for Firewall

Correct Answer: C
https://kb.fortinet.com/kb/documentLink.do?externalID=FD50220