Question No 1

Which two statements about FortiGate FSSO agentless polling mode are true? (Choose two.)

Choose the Choices:

FortiGate uses the AD server as the collector agent.

FortiGate uses the SMB protocol to read the event viewer logs from the DCs.

FortiGate does not support workstation check.

FortiGate directs the collector agent to use a remote LDAP server.

Question No 2

FortiGuard categories can be overridden and defined in different categories. To create a web rating override for example.com home page, the override must be configured using a specific syntax. Which two syntaxes are correct to configure web rating for the home page? (Choose two.)

Choose the Choices:

Question No 3

Refer to the exhibits to view the firewall policy (Exhibit A) and the antivirus profile (Exhibit B). Which statement is correct if a user is unable to receive a block replacement message when downloading an infected file for the first time?

Choose the Choices:

The firewall policy performs the full content inspection on the file.

The flow - based inspection is used, which resets the last packet to the user.

The volume of traffic being inspected is too high for this model of FortiGate.

The intrusion prevention security profile needs to be enabled when using flow - based inspection mode.

Question No 4

Which three options are the remote log storage options you can configure on FortiGate? (Choose three.)

Choose the Choices:

Question No 5

Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

Choose the Choices:

The collector agent uses a Windows API to query DCs for user logins.

NetAPI polling can increase bandwidth usage in large networks.

The collector agent must search security event logs.

The NetSession Enum function is used to track user logouts.

Practice Fortinet NSE4_FGT-7.0 Exam Questions

Question No 1

Question No 2

Question No 3

Question No 4

Question No 5

NSE4_FGT-7.0 Exam Features

NSE4_FGT-7.0 PDF Dumps