NSE4_FGT_AD-7.6 試験問題を無料オンラインアクセス

Which three statements explain a flow-based antivirus profile? (Choose three answers)

• A.FortiGate buffers the whole file but transmits to the client at the same time.
• B.The IPS engine handles the process as a standalone.
• C.Flow-based inspection optimizes performance compared to proxy-based inspection.
• D.Flow-based inspection uses a hybrid of the scanning modes available in proxy-based inspection.
• E.If a virus is detected, the last packet is delivered to the client.

Which two statements are correct when FortiGate enters conserve mode? (Choose two answers)

• A.FortiGate continues to run critical security actions, such as quarantine.
• B.FortiGate continues to transmit packets without IPS inspection when the fail-open global setting in IPS is enabled.
• C.FortiGate halts complete system operation and requires a reboot to regain available resources.
• D.FortiGate refuses to accept configuration changes.

A network administrator is reviewing firewall policies in both Interface Pair View and By Sequence View.
The policies appear in a different order in each view. Why is the policy order different in these two views?

• A.By Sequence View groups policies based on rule priority, while Interface Pair View always follows the order of traffic logs.
• B.Interface Pair View sorts policies based on matching interfaces, while By Sequence View shows the actual processing order of rules.
• C.Policies in Interface Pair View are prioritized by security levels, while By Sequence View strictly follows the administrator ' s manual ordering.
• D.The firewall dynamically reorders policies in Interface Pair View based on recent traffic patterns, but By Sequence View remains static.

Refer to the exhibit to view the firewall policy.

Why would the firewall policy not block a well-known virus, for example EICAR? (Choose one answer)

• A.The firewall policy is not configured in proxy-based inspection mode.
• B.The action on the firewall policy is not set to DENY.
• C.Web filter is not enabled, so the firewall policy does not complement the antivirus profile.
• D.The firewall policy does not apply deep content inspection.

What are two characteristics of HA cluster heartbeat IP addresses in a FortiGate device? (Choose two.)

• A.Heartbeat interfaces have virtual IP addresses that are manually assigned.
• B.The heartbeat interface of the primary device in the cluster is always assigned IP address 169.254.0.1.
• C.Heartbeat IP addresses are used to distinguish between cluster members.
• D.A change in the heartbeat IP address happens when a FortiGate device joins or leaves the cluster.