[Jul 20, 2022] Achive your Success with Latest Fortinet NSE4_FGT-7.0 Exam [Q16-Q30]

QUESTION 16
Which three statements about a flow-based antivirus profile are correct? (Choose three.)

QUESTION 17
Refer to the exhibit.

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 fails to come up. The administrator has also re-entered the pre-shared key on both FortiGate devices to make sure they match.
Based on the phase 1 configuration and the diagram shown in the exhibit, which two configuration changes will bring phase 1 up? (Choose two.)

QUESTION 18
An administrator has configured a route-based IPsec VPN between two FortiGate devices. Which statement about this IPsec VPN configuration is true?

QUESTION 19
An administrator has configured outgoing Interface any in a firewall policy. Which statement is true about the policy list view?

QUESTION 20
An administrator must disable RPF check to investigate an issue.
Which method is best suited to disable RPF without affecting features like antivirus and intrusion prevention system?

QUESTION 21
FortiGate is configured as a policy-based next-generation firewall (NGFW) and is applying web filtering and application control directly on the security policy.
Which two other security profiles can you apply to the security policy? (Choose two.)

QUESTION 22
Which statements are true regarding firewall policy NAT using the outgoing interface IP address with fixed port disabled? (Choose two.)

QUESTION 23
Refer to the exhibit, which contains a static route configuration.

An administrator created a static route for Amazon Web Services.
What CLI command must the administrator use to view the route?

QUESTION 24
When browsing to an internal web server using a web-mode SSL VPN bookmark, which IP address is used as the source of the HTTP request?

QUESTION 25
A team manager has decided that, while some members of the team need access to a particular website, the majority of the team does not Which configuration option is the most effective way to support this request?

QUESTION 26
Which three statements about security associations (SA) in IPsec are correct? (Choose three.)

QUESTION 27
What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?

QUESTION 28
Which two statements are true when FortiGate is in transparent mode? (Choose two.)

QUESTION 29
If the Issuer and Subject values are the same in a digital certificate, which type of entity was the certificate issued to?

QUESTION 30
An administrator wants to configure timeouts for users. Regardless of the user behavior, the timer should start as soon as the user authenticates and expire after the configured value.
Which timeout option should be configured on FortiGate?