Fortinet NSE4_FGT_AD-7.6 問題集

質問 1：
What are three key routing principles in SD-WAN? (Choose three answers)
A. By default, SD-WAN rules are skipped if the included SD-WAN members do not have a valid route to the destination.
B. By default, SD-WAN rules are skipped if only one route to the destination is available.
C. By default, SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member.
D. Regular policy routes have precedence over SD-WAN rules.
E. SD-WAN rules have precedence over any other type of routes.
正解：A,C,D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Refer to the exhibit.

An administrator has created a new firewall address to use as the destination for a static route. Why is the administrator not able to select the new address in the Destination field of the new static route? (Choose one answer)
A. In the new static route, the administrator must select Named Address.
B. In the new firewall address, Routing configuration must be enabled.
C. In the new firewall address, the FQDN address must first be resolved.
D. In the new static route, the administrator must first set the interface to port2.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Refer to the exhibit.

FortiGate has two separate firewall policies for Sales and Engineering to access the same web server with the same security profiles.
Which action must the administrator perform to consolidate the two policies into one?
A. Select port1 and port2 subnets in a single firewall policy.
B. Create an Aggregate interface that includes port1 and port2 to create a single firewall policy.
C. Enable Multiple Interface Policies to select port1 and port2 in the same firewall policy.
D. Replace port1 and port2 with the any interface in a single firewall policy.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
You are onboarding an agentless, secure web gateway (SWG) endpoint for secure internet access (SIA). What will happen to the user ' s nonweb traffic? (Choose one answer)
A. All the nonweb traffic will bypass FortiSASE.
B. FortiSASE will use Firewall-as-a-Service (FWaaS) to redirect nonweb traffic.
C. The endpoint will use split tunneling to redirect nonweb traffic to FortiSASE.
D. FortiSASE will use SWG to redirect nonweb traffic to FortiExtender.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Refer to the exhibits.



A web filter profile configuration and firewall policy configuration are shown.
You are trying to access www. facebook.com, but you are redirected to a FortiGuard web filtering block page.
Based on the exhibits, what is the possible cause of the issue?
A. The firewall policy inspection mode is incorrect.
B. For www. facebook. com. the URL filter action is incorrect.
C. The web filter profile feature set is configured incorrectly.
D. The web rating override configuration is incorrect.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Refer to the exhibit
A firewall policy to enable active authentication is shown.

When attempting to access an external website using an active authentication method, the user is not presented with a login prompt. What is the most likely reason for this situation?
A. No matching user account exists for this user.
B. The Remote-users group is not added to the Destination
C. The Remote-users group must be set up correctly in the FSSO configuration.
D. The Service DNS is required in the firewall policy.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
There are multiple dialup IPsec VPNs configured in aggressive mode on the HQ FortiGate. The requirement is to connect dial-up users to their respective department VPN tunnels.
Which phase 1 setting you can configure to match the user to the tunnel?
A. Dead Peer Detection
B. IKE Mode Config
C. Local Gateway
D. Peer ID
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 8：
Refer to the exhibit.

Which two ways can you view the log messages shown in the exhibit? (Choose two.)
A. By filtering by policy universally unique identifier (UUID) and application name in the log entry
B. Using the FortiGate CLI command diagnose log test
C. By right clicking the implicit deny policy
D. In the Forward Traffic section
正解：A,D
解説: (Topexam メンバーにのみ表示されます)

質問 9：
Which two statements about the Security Fabric rating are true? (Choose two answers)
A. Security Rating Insights are available only in the Security Rating page.
B. The root FortiGate provides executive summaries of all the FortiGate devices in the Security Fabric.
C. The Security Posture category provides PCI compliance results.
D. A license is required to obtain an executive summary in the Security Rating section.
正解：B,C
解説: (Topexam メンバーにのみ表示されます)