NSE4_FGT_AD-7.6 Free Practice Test

Refer to the exhibits.



An administrator has observed the performance status outputs on an HA cluster for 55 seconds.
Which FortiGate is the primary?

1. A. HQ-NGFW-1 with the parameter memory-failover-flip-timeout setting
2. B. HQ-NGFW-2 with the parameter priority setting
3. C. HQ-NGFW-1 with the parameter override setting
4. D. HQ-NGFW-2 with the parameter memory-failover-threshold setting

Correct Answer: D

Refer to the exhibit.
A partial cloud topology is shown.

You deployed a FortiGate Cloud-Native Firewall (CNF) in AWS.
During the deployment, which components must the FortiGate CNF create to handle traffic from the EC2 instance?

1. A. The customer VPC and GWLBe
2. B. The gateway load balancer endpoint (GWLBe) in the customer virtual private cloud (VPC)
3. C. The CNF VP
4. D. customer VP
5. E. and GWLB
6. F. The GWL
7. G. GWLBe, and the internet gateway (IGW) in the customer VPC

Correct Answer: B

When configuring firewall policies which of the following is true regarding the policy ID? (Choose two.)

1. A. A firewall policy ID identifies the order of policy execution in firewall policies.
2. B. A policy ID cannot be modified once a policy is created.
3. C. You can create a policy in CLI with policy ID 0
4. D. It is mandatory to provide a policy ID while creating a firewall policy regardless of GUI or CLI.

Correct Answer: BC

Refer to the exhibit.

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, which two configuration changes will bring phase 2 up? (Choose two.)

1. A. On BR1-FGT, set Remote Address to 10.0.11.0/255.255.255.0.
2. B. On HQ-NGF
3. C. enable Diffie-Hellman Group 2.
4. D. On BR1-FG
5. E. set Seconds to 43200
6. F. On HQ-NGF
7. G. set Encryption to AES256.

Correct Answer: AD

Refer to the exhibit.
A RADIUS server configuration is shown.

An administrator added a configuration for a new RADIUS server While configuring, the administrator enabled Include in every user group What is the impact of enabling Include in every user group in a RADIUS configuration?

1. A. This option places the RADIUS server, and all users who can authenticate against that server, into every FortiGate user group.
2. B. This option places all FortiGate users and groups required to authenticate into the RADIUS server, which, in this case, is FortiAuthenticator.
3. C. This option places the RADIUS server, and all users who can authenticate against that server, into every RADIUS group.
4. D. This option places all users into every RADIUS user group, including groups that are used for the LDAP server on FortiGate.

Correct Answer: A