Fortinet NSE4_FGT-7.0 問題集

質問 1：
Which two statements about FortiGate FSSO agentless polling mode are true? (Choose two.)
A. FortiGate does not support workstation check.
B. FortiGate uses the AD server as the collector agent.
C. FortiGate uses the SMB protocol to read the event viewer logs from the DCs.
D. FortiGate directs the collector agent to use a remote LDAP server.
正解：C,D

質問 2：
Refer to the exhibit.

The Root and To_Internet VDOMs are configured in NAT mode. The DMZ and Local VDOMs are configured in transparent mode.
The Root VDOM is the management VDOM. The To_Internet VDOM allows LAN users to access the internet. The To_Internet VDOM is the only VDOM with internet access and is directly connected to ISP modem.
With this configuration, which statement is true?
A. Inter-VDOM links are required to allow traffic between the Local and DMZ VDOMs.
B. Inter-VDOM links are required to allow traffic between the Local and Root VDOMs.
C. A static route is required on the To_Internet VDOM to allow LAN users to access the internet.
D. Inter-VDOM links are not required between the Root and To_Internet VDOMs because the Root VDOM is used only as a management VDOM.
正解：B

質問 3：
Which two settings can be separately configured per VDOM on a FortiGate device? (Choose two.)
A. Operating mode
B. NGFW mode
C. FortiGuaid update servers
D. System time
正解：A,B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Which two statements are true when FortiGate is in transparent mode? (Choose two.)
A. FortiGate forwards frames without changing the MAC address.
B. Static routes are required to allow traffic to the next hop.
C. By default, all interfaces are part of the same broadcast domain.
D. The existing network IP schema must be changed when installing a transparent mode.
正解：A,C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)
A. Uninterruptable upgrade is enabled by default.
B. Traffic load balancing is temporally disabled while upgrading the firmware.
C. Only secondary FortiGate devices are rebooted.
D. The firmware image must be manually uploaded to each FortiGate.
正解：A,B

質問 6：
An administrator is configuring an Ipsec between site A and siteB. The Remotes Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192.16.1.0/24 and the remote quick mode selector is 192.16.2.0/24. How must the administrator configure the local quick mode selector for site B?
A. 192.168.2.0/24
B. 192.168.0.0/8
C. 192.168.3.0/24
D. 192.168.1.0/24
正解：A

質問 7：
Refer to the exhibit.

Examine the intrusion prevention system (IPS) diagnostic command.
Which statement is correct If option 5 was used with the IPS diagnostic command and the outcome was a decrease in the CPU usage?
A. The IPS engine was unable to prevent an intrusion attack.
B. The IPS engine was blocking all traffic.
C. The IPS engine will continue to run in a normal state.
D. The IPS engine was inspecting high volume of traffic.
正解：D

質問 8：
Which of the following statements about backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)
A. Log backups from the CLI cannot be restored to another FortiGate.
B. Log backups from the CLI can be configured to upload to FTP as a scheduled time
C. Log downloads from the GUI are stored as LZ4 compressed files.
D. Log downloads from the GUI are limited to the current filter view
正解：A,D

質問 9：
Which two protocols are used to enable administrator access of a FortiGate device? (Choose two.)
A. FortiTelemetry
B. FTM
C. HTTPS
D. SSH
正解：C,D