Fortinet NSE4_FGT-7.0 問題集

質問 1：
Refer to the exhibit.

Which contains a network diagram and routing table output.
The Student is unable to access Webserver.
What is the cause of the problem and what is the solution for the problem?
A. The first packet sent from Student failed the RPF check.
This issue can be resolved by adding a static route to 10.0.4.0/24 through wan1.
B. The first reply packet for Student failed the RPF check.
This issue can be resolved by adding a static route to 203.0.114.24/32 through port3.
C. The first reply packet for Student failed the RPF check.
This issue can be resolved by adding a static route to 10.0.4.0/24 through wan1.
D. The first packet sent from Student failed the RPF check.
This issue can be resolved by adding a static route to 203.0.114.24/32 through port3.
正解：D

質問 2：
Which type of logs on FortiGate record information about traffic directly to and from the FortiGate management IP addresses?
A. Security logs
B. Forward traffic logs
C. System event logs
D. Local traffic logs
正解：D

質問 3：
An administrator has configured outgoing Interface any in a firewall policy. Which statement is true about the policy list view?
A. Policy lookup will be disabled.
B. Search option will be disabled
C. By Sequence view will be disabled.
D. Interface Pair view will be disabled.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)
A. The operation mode is transparent.
B. The interface is a member of a zone.
C. Captive portal is enabled in the interface.
D. The interface is a member of a virtual wire pair.
E. The interface has been configured for one-arm sniffer.
正解：A,D,E
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Refer to the exhibit, which contains a session diagnostic output.

Which statement is true about the session diagnostic output?
A. The session is a bidirectional UDP connection.
B. The session is in TCP ESTABLISHED state.
C. The session is a UDP unidirectional state.
D. The session is a bidirectional TCP connection.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Which of the following statements is true regarding SSL VPN settings for an SSL VPN portal?
A. By default, the SSL VPN portal requires the installation of a client's certificate.
B. By default, the admin GUI and SSL VPN portal use the same HTTPS port.
C. By default, FortiGate uses WINS servers to resolve names.
D. By default, split tunneling is enabled.
正解：B

質問 7：
Which two statements are true about collector agent standard access mode? (Choose two.)
A. Standard access mode supports nested groups.
B. Standard mode security profiles apply to organizational units (OU).
C. Standard mode security profiles apply to user groups.
D. Standard mode uses Windows convention-NetBios: Domain\Username.
正解：C,D

質問 8：
Refer to the exhibit.

Which contains a session list output. Based on the information shown in the exhibit, which statement is true?
A. Destination NAT is disabled in the firewall policy.
B. One-to-one NAT IP pool is used in the firewall policy.
C. Overload NAT IP pool is used in the firewall policy.
D. Port block allocation IP pool is used in the firewall policy.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 9：
Examine the network diagram shown in the exhibit, then answer the following question:

Which one of the following routes is the best candidate route for FGT1 to route traffic from the Workstation to the Web server?
A. 0.0.0.0/0 [20/0] via 10.4.200.2, port2
B. 10.4.200.0/30 is directly connected, port2
C. 172.16.0.0/16 [50/0] via 10.4.200.2, port2 [5/0]
D. 172.16.32.0/24 is directly connected, port1
正解：D