NSE4_FGT_AD-7.6 試験問題を無料オンラインアクセス

Which two statements about the Security Fabric rating are true? (Choose two answers)

• A.The root FortiGate provides executive summaries of all the FortiGate devices in the Security Fabric.
• B.Security Rating Insights are available only in the Security Rating page.
• C.A license is required to obtain an executive summary in the Security Rating section.
• D.The Security Posture category provides PCI compliance results.

Refer to the exhibit.

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, which two configuration changes will bring phase 2 up? (Choose two.)

• A.On HQ-NGFW. set Encryption to AES256.
• B.On BR1-FGT. set Seconds to 43200
• C.On BR1-FGT, set Remote Address to 10.0.11.0/255.255.255.0.
• D.On HQ-NGFW. enable Diffie-Hellman Group 2.

An administrator has configured a dialup IPsec VPN on FortiGate with add-route enabled. However, the static route is not showing in the routing table. Which two statements about this scenario are correct? (Choose two.)

• A.The administrator must enable a dynamic routing protocol on the dialup interface.
• B.The administrator must ensure phase 2 is successfully established
• C.The administrator must define the remote network correctly in the phase 2 selectors.
• D.The administrator must use a policy route instead of a static route for add-route to work properly.

What is the primary FortiGate election process when the HA override setting is enabled? (Choose one answer)

• A.Connected monitored ports > HA uptime > Priority > FortiGate serial number
• B.Connected monitored ports > Priority > HA uptime > FortiGate serial number
• C.Connected monitored ports > System uptime > Priority > FortiGate serial number
• D.Connected monitored ports > Priority > System uptime > FortiGate serial number

What are two characteristics of HA cluster heartbeat IP addresses in a FortiGate device? (Choose two.)

• A.Heartbeat IP addresses are used to distinguish between cluster members.
• B.The heartbeat interface of the primary device in the cluster is always assigned IP address 169.254.0.1.
• C.A change in the heartbeat IP address happens when a FortiGate device joins or leaves the cluster.
• D.Heartbeat interfaces have virtual IP addresses that are manually assigned.