NSE4_FGT-7.2 試験問題を無料オンラインアクセス

Why does FortiGate Keep TCP sessions in the session table for several seconds, even after both sides (client and server) have terminated the session?

• A.To allow for out-of-order packets that could arrive after the FIN/ACK packets
• B.To remove the NAT operation
• C.To finish any inspection operations
• D.To generate logs

Which of the following statements about central NAT are true? (Choose two.)

• A.Source NAT, using central NAT, requires at least one central SNAT policy.
• B.Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall.
• C.Central NAT can be enabled or disabled from the CLI only.
• D.IP tool references must be removed from existing firewall policies before enabling central NAT .

Refer to the exhibit, which contains a session diagnostic output.

Which statement is true about the session diagnostic output?

• A.The session is a bidirectional UDP connection.
• B.The session is a bidirectional TCP connection.
• C.The session is in TCP ESTABLISHED state.
• D.The session is a UDP unidirectional state.

Which certificate value can FortiGate use to determine the relationship between the issuer and the certificate?

• A.Subject Alternative Name value
• B.Subject value
• C.Subject Key Identifier value
• D.SMMIE Capabilities value

Refer to the exhibit.

An administrator is running a sniffer command as shown in the exhibit.
Which three pieces of information are included in the sniffer output? (Choose three.)

• A.Application header
• B.Packet payload
• C.Interface name
• D.IP header
• E.Ethernet header