Online Access Free NSE4_FGT-7.0 Practice Test

When configuring a firewall virtual wire pair policy, which following statement is true?

• A.Only a single virtual wire pair can be included in each policy.
• B.Exactly two virtual wire pairs need to be included in each policy.
• C.Any number of virtual wire pairs can be included, as long as the policy traffic direction is the same.
• D.Any number of virtual wire pairs can be included in each policy, regardless of the policy traffic direction settings.

Refer to the exhibit.




The exhibit contains a network diagram, central SNAT policy, and IP pool configuration.
The WAN (port1) interface has the IP address 10.200.1.1/24.
The LAN (port3) interface has the IP address 10.0.1.254/24.
A firewall policy is configured to allow to destinations from LAN (port3) to WAN (port1).
Central NAT is enabled, so NAT settings from matching Central SNAT policies will be applied.
Which IP address will be used to source NAT the traffic, if the user on Local-Client (10.0.1.10) pings the IP address of Remote-FortiGate (10.200.3.1)?

• A.10.200.1.49
• B.10.200.1.149
• C.10.200.1.99
• D.10.200.1.1

Which two statements are true about the RPF check? (Choose two.)

• A.The RPF check is run on the first reply packet of any new session.
• B.RPF is a mechanism that protects FortiGate and your network from IP spoofing attacks.
• C.The RPF check is run on the first sent packet of any new session.
• D.The RPF check is run on the first sent and reply packet of any new session.

Refer to the exhibit to view the application control profile.

Based on the configuration, what will happen to Apple FaceTime?

• A.Apple FaceTime will be allowed, based on the Apple filter configuration.
• B.Apple FaceTime will be allowed, based on the Categories configuration.
• C.Apple FaceTime will be blocked, based on the Excessive-Bandwidth filter configuration
• D.Apple FaceTime will be allowed only if the filter in Application and Filter Overrides is set to Learn

An administrator is configuring an IPsec VPN between site A and site B.
The Remote Gateway setting in both sites has been configured as Static IP Address.
For site A, the local quick mode selector is 192.168.1.0/24 and the remote quick mode selector is 192.168.2.0/24.
Which subnet must the administrator configure for the local quick mode selector for site B?

• A.192.168.3.0/24
• B.192.168.2.0/24
• C.192.168.1.0/24
• D.192.168.0.0/24