NSE4_FGT_AD-7.6 Practice Test

NSE4_FGT_AD-7.6 Practice Test practice questions, page 3 of 4, with answer review and explanations.

Question 11

Refer to the exhibit. The predefined deep-inspection and custom-deep-inspection profiles exclude some web categories from SSL inspection, as shown in the exhibit. For which two reasons are these web categories exempted? (Choose two.)

  1. The FortiGate temporary certificate denies the browser’s access to websites that use HTTP Strict Transport Security.
  2. The resources utilization is optimized because these websites are in the trusted domain list on FortiGate.
  3. These websites are in an allowlist of reputable domain names maintained by FortiGuard.
  4. The legal regulation aims to prioritize user privacy and protect sensitive information for these websites.

Question 12

What are two features of FortiGate FSSO agentless polling mode? (Choose two.)

  1. FortiGate does not support workstation check.
  2. FortiGate directs the collector agent to use a remote LDAP server.
  3. FortiGate uses the AD server as the collector agent.
  4. FortiGate uses the SMB protocol to read the event viewer logs from the DCs.

Question 13

Refer to the exhibit. Which two ways can you view the log messages shown in the exhibit? (Choose two.)

  1. By right clicking the implicit deny policy
  2. By filtering the policy universally unique identifier (UUID) and application name in the log entry
  3. Using the FortiGate CLI command diagnose log test
  4. In the Forward Traffic section

Question 14

Refer to the exhibit. A partial cloud topology is shown. You deployed a FortiGate Cloud-Native Firewall (CNF) in AWS. During the deployment, which components must be FortiGate CNF create to handle traffic from the EC2 instance?

  1. The GWLB, GWLBe, and the internet gateway (IGW) in the customer VPC
  2. The CNF VPC, customer VPC, and GWLB
  3. The customer VPC and GWLBe
  4. The gateway load balancer endpoint (GWLBe) in the customer virtual private cloud (VPC)

Question 15

You have configured the below commands on a FortiGate. What would be the impact of this configuration on FortiGate?

  1. FortiGate will enable strict RPF on all its interfaces and port1 will be enable for asymmetric routing.
  2. Port1 will be enabled with flexible RPF, and all other interfaces will be enabled for strict RPF.
  3. FortiGate will enable strict RPF on all its interfaces and port1 will be exempted from RPF checks.
  4. The global configuration will take precedence and FortiGate will enable strict RPF on all interfaces.