NSE4_FGT_AD-7.6 試験問題を無料オンラインアクセス

Refer to the exhibit. Based on this partial configuration, what are the two possible outcomes when FortiGate enters conserve mode? (Choose two.)

• A.Administrators cannot change the configuration.
• B.FortiGate drops new sessions requiring inspection.
• C.Administrators must restart FortiGate to allow new session.
• D.FortiGate skips quarantine actions.

When FortiGate performs SSL/SSH full inspection, you can decide how it should react when it detects an invalid certificate.
Which three actions are valid actions that FortiGate can perform when it detects an invalid certificate? (Choose three.)

• A.Trust & Allow
• B.Allow
• C.Block & Warning
• D.Allow & Warning
• E.Block

Which two statements about equal-cost multi-path (ECMP) configuration on FortiGate are true?
(Choose two.)

• A.If SD-WAN is disabled, you configure the load balancing algorithm in config system settings.
• B.If SD-WAN is disabled, you can configure the parameter v4-ecmp-mode to volume-based.
• C.If SD-WAN is enabled, you can configure routes with unequal distance and priority values to be part of ECMP.
• D.If SD-WAN is enabled, you control the load balancing algorithm with the parameter load-balance- mode.

What are two features of the NGFW profile-based mode? (Choose two.)

• A.NGFW profile-based mode policies support both flow inspection and proxy inspection.
• B.NGFW profile-based mode must require the use of central source NAT policy.
• C.NGFW profile-based mode supports applying applications and web filtering profiles in a firewall policy.
• D.NGFW profile-based mode can only be applied globally and not on individual VDOMs.

Refer to the exhibits. The exhibits show a diagram of a FortiGate device connected to the network, as well as the IP pool configuration and firewall policy objects.
The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port3) interface has the IPaddress 10.0.1.254/24.
Which IP address will be used to source NAT (SNAT) the traffic, if the user on Local-Client (10.0.1.10) pings the IP address of Remote-FortiGate (10.200.3.1)?

• A.10.200.1.49
• B.10.200.1.149
• C.10.200.1.99
• D.10.200.1.1