NSE4_FGT_AD-7.6 practice questions 31–40

1. Question 31 · 78 in bank

   A new administrator is configuring FSSO authentication on FortiGate using DC Agent Mode. Which step is not part of the expected process?

   • AThe user logs into the windows domain.
   • BFortiGate determines user identity based on the IP address in the FSSO list.
   • CThe DC agent sends login event data directly to FortiGate.
   • DThe collector agent forwards login event data to FortiGate.

   Show answer

   Answer: C

   Next question

2. Question 32 · 78 in bank

   Refer to the exhibit.

   

   The NOC team connects to the FortiGate GUI with the NOC_Access admin profile. They request that their GUI sessions do not disconnect too early during inactivity. What must the administrator configure to answer this specific request from the NOC team?

   • AIncrease the offline value of the Override Idle Timeout parameter in the NOC_Access admin profile.
   • BEnsure that all NOC_Access users are assigned the super_admin role to guarantee access.
   • CMove NOC_Access to the top of the list to ensure all profile settings take effect.
   • DIncrease the admintimeout value under config system accprofile NOC_Access.

   Show answer

   Answer: A

   Next question

3. Question 33 · 78 in bank

   How does FortiExtender connect to FortiSASE in a site-based, remote internet access method?

   • AFortiExtender establishes a secure SSL connection using FortiClient.
   • BFortiExtender uses the proxy auto-configuration (PAC) file and an explicit web proxy to connect.
   • CFortiExtender first connects to a FortiGate LAN extension through a secure web gateway (SWG).
   • DFortiExtender uses a Virtual Extensible LAN (VXLAN)-over-IPsec connection.

   Show answer

   Answer: D

   Next question

4. Question 34 · 78 in bank

   Select 2

   Refer to the exhibit.

   

   Which two statements about the FortiGuard connection are true? (Choose two.)

   • AThe weight increases as the number of failed packets rises.
   • BFortiGate is using the default port for FortiGuard communication.
   • CFortiGate identified the FortiGuard Server using DNS lookup.
   • DYou can configure unreliable protocols to communicate with FortiGuard Server.

   Show answer

   Answer: AD

   Next question

5. Question 35 · 78 in bank

   Refer to the exhibit, which contains a RADIUS server configuration.

   

   An administrator added a configuration for a new RADIUS server. While configuring, the administrator enabled Include in every user group. What is the impact of enabling Include in every user group in a RADIUS configuration?

   • AThis option places the RADIUS server, and all users who can authenticate against that server, into every FortiGate user group.
   • BThis option places all FortiGate and groups required to authenticate into the RADIUS server, which, in this case, is FortiAuthenticator.
   • CThis option places all users into every RADIUS user group, including groups that are used for the LDAP server on FortiGate.
   • DThis option places the RADIUS server, and all users who can authenticate against that server, into every RADIUS group.

   Show answer

   Answer: A

   Next question

6. Question 36 · 78 in bank

   Select 2

   An administrator wants to form an HA cluster using the FGCP protocol. Which two requirements must the administrator ensure both members fulfill? (Choose two.)

   • AThey must have the same HA group ID.
   • BThey must have the heartbeat interfaces in the same subnet.
   • CThey must have the same hard drive configuration.
   • DThey must have the same number of configured VDOMs.

   Show answer

   Answer: AC

   Next question

7. Question 37 · 78 in bank

   Select 2

   When configuring firewall policies which of the following is true regarding the policy ID? (Choose two.)

   • AA policy ID cannot be modified once a policy is created.
   • BA firewall policy ID identifies the order of policy execution in firewall policies.
   • CIt is mandatory to provide a policy ID while creating a firewall policy regardless of GUI or CLI.
   • DYou can create a policy in CLI with policy ID 0.

   Show answer

   Answer: AD

   Next question

8. Question 38 · 78 in bank

   Refer to the exhibits.

   

   

   

   The exhibits show a diagram of a FortiGate device connected to the network, as well as the IP pool configuration and firewall policy objects. The WAN (port2) interface has the IP address 100.65.0.101/24. The LAN (port4) interface has the IP address 10.0.11.254/24. Which IP address will be used to source NAT (SNAT) the traffic, if the user on HQ-PC-1 (10.0.11.50) pings the IP address of BR-FGT (100.65.1.111)

   • A100.65.0.99
   • B100.65.0.101
   • C100.65.0.149
   • D100.65.0.49

   Show answer

   Answer: A

   Next question

9. Question 39 · 78 in bank

   Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI.

   

   Based on the exhibit, which statement is true?

   • AThe Underlay zone contains no member.
   • Bport2 and port3 are not assigned to a zone.
   • CThe Underlay zone is the zone by default.
   • DThe virtual-wan-link and overlay zones can be deleted.

   Show answer

   Answer: A

   Next question

10. Question 40 · 78 in bank

    Select 2

    An administrator has configured a dialup IPsec VPN on FortiGate with add-route enabled. However, the static route is not showing in the routing table. Which two statements about this scenario are correct? (Choose two.)

    • AThe administrator must ensure phase 2 is successfully established.
    • BThe administrator must enable a dynamic routing protocol on the dialup interface.
    • CThe administrator must define the remote network correctly in the phase 2 selectors.
    • DThe administrator must use a policy route instead of a static route for add-route to work properly.

    Show answer

    Answer: AC

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

NSE4_FGT_AD-7.6 practice, question 31. 78 questions available.