NSE4_FGT_AD-7.6 Exam Questions

Which three statements explain a flow-based antivirus profile? (Choose three.)

Refer to the exhibit. An administrator has configured an Application Overrides for the ABC.com application signature and set the Action to Allow. The application control profile is...

Which two statements describe characteristics of automation stitches? (Choose two.)

Which three statements about SD-WAN performance SLAs are true? (Choose three.)

Which two statements are true about an HA cluster? (Choose two.)

Refer to the exhibit. An administrator has created a new firewall address to use as the destination for a static route. Why is the administrator not able to select the new address...

FortiGate is operating in NAT mode and has two physical interfaces connected to the LAN and DMZ networks respectively. Which two statements about the requirements of connected phys...

When configuring a FortiGate in a multi-WAN setup, why would an administrator enable session preservation on an interface?

You are analyzing connectivity problems caused by intermediate devices blocking traffic in SSL VPN environment. In which two ways can you effectively resolve the problem? (Choose t...

Refer to the exhibit. FortiGate has two separate firewall policies for Sales and Engineering to access the same web server with the same security profiles. Which action must the ad...

ports is passing through the FortiGate without being blocked. What FortiGate settings should you check to resolve this issue?

When configuring firewall policies which of the following is true regarding the policy ID? (Choose two.)

Which two statements are correct when FortiGate enters conserve mode? (Choose two.)

A remote user reports slow SSL VPN performance and frequent disconnections. The user is located in an area with poor internet connectivity. What setting should the administrator ad...

An administrator wants to analyze and manage digital certificates to prevent browser warnings when users connect to the SSL VPN portal. Which two statements describe how to correct...

An administrator suspects that the Collector Agent is not forwarding login events to FortiGate. What is the most effective troubleshooting step?

Refer to the exhibit. A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phas...

Refer to the exhibits. An administrator has observed the performance status outputs on an HA cluster for 55 seconds. Which FortiGate is the primary?

Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

You have configured the FortiGate device for FSSO. A user is successful in log-in to windows, but their access to the internet is denied. What should the administrator check first?

What are three key routing principles in SD-WAN? (Choose three.)

Refer to the exhibits. The exhibits show a diagram of a FortiGate device connected to the network, as well as the IP pool configuration and firewall policy objects. The WAN (port2)...

Refer to the exhibits. The exhibits show a diagram of a FortiGate device connected to the network, and the firewall configuration. An administrator created a Deny policy with defau...

Refer to the exhibits. The exhibits show the system performance output and default configuration of high memory usage thresholds on a FortiGate device. Based on the system performa...

Refer to the exhibits. Based on the current HA status, an administrator updates the override and priority parameters on HQ-NGFW-1 and HQ-NGFW-2 as shown in the exhibit. What would...

Which of the following statements is true regarding the FortiGate cluster?

Refer to the exhibits. An administrator wants to add HQ-ISFW-2 in the Security Fabric. HQ-ISFW-2 is in the same subnet as HQ-ISFW. After configuring the Security Fabric settings on...

Refer to the exhibit. The exhibit shows the FortiGuard Category Based Filter section of a corporate web filter profile. An administrator must block access to download.com, which be...

An administrator wants to configure dead peer detection (DPD) on IPsec VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when there is no inbo...

Which two statements about equal-cost multi-path (ECMP) configuration on FortiGate are true? (Choose two.)

You have created a web filter profile named restrict_media-profile with a daily category usage quotas. When you are adding the profile to the firewall policy, the restrict_media-pr...

Refer to the exhibit. As an administrator you have created an IPS profile, but it is not performing as expected. While testing you got the output as shown in the exhibit. What coul...

Refer to the exhibit. The NOC team connects to the FortiGate GUI with the NOC_Access admin profile. They request that their GUI sessions do not disconnect too early in inactivity....

Refer to the exhibit. Based on this partial configuration, what are the two possible outcomes when FortiGate enters conserve mode? (Choose two.)

A network administrator enabled antivirus and selected an SSL inspection profile on a firewall policy. When downloading an EICAR test file through HTTP, FortiGate detects the virus...

You have configured the below commands on a FortiGate. config system settings set strict-src-check enable end config system interface edit port1 set src-check disable next end What...

Refer to the exhibit. What would be the impact of these settings on the Server certificate SNI check configuration on FortiGate?

A new administrator is configuring FSSO authentication on FortiGate using DC Agent Mode. Which step is NOT part of the expected process?

A network administrator is reviewing firewall policies in both Interface Pair View and By Sequence View. The policies appear in a different order in each view. Why is the policy or...

An administrator notices that some users are unable to establish SSL VPN connections, while others can connect without any issues. What should the administrator check first?

Refer to the exhibits. Which IP address will be used to source NAT (SNAT) the traffic, if the user on Local-Client (10.0.1.10) pings the IP address of Remote-FortiGate (10.200.3.1)...

A network administrator has configured an SSL/SSH inspection profile defined for full SSL inspection and set with a private CA certificate. The firewall policy allows the traffic u...

What are two features of collector agent advanced mode? (Choose two.)

You are encountering connectivity problems caused by intermediate devices blocking IPsec traffic. In which two ways can you effectively resolve the problem? (Choose two.)

Refer to the exhibit. Which algorithm does SD-WAN use to distribute traffic that does not match any of the SD-WAN rules?

Refer to the exhibit. In the network shown in the exhibit, the web client cannot connect to the HTTP web server. The administrator runs the FortiGate built-in sniffer and gets the...

Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI. Based on the exhibit, which statement is true?

Which two statements are true regarding FortiGate HA configuration synchronization? (Choose two.)

What are two features of the NGFW profile-based mode? (Choose two.)

Refer to the exhibits. You have implemented the application sensor and the corresponding firewall policy as shown in the exhibits. Which two factors can you observe from these conf...