Question 1

Which two components are part of the secure internet access (SIA) agent-based mode on FortiSASE? (Choose two.)

Options :

A : FortiSASE Firewall-as-a-Service (FWaaS)

B : The proxy auto-configuration (PAC) file

C : VPN policies

D : FortiExtender

Answer: A,C

Question 2

FortiGate is operating in NAT mode and has two physical interfaces connected to the LAN and DMZ networks respectively. Which two statements about the requirements of connected physical interfaces on FortiGate are true? (Choose two.)

Options :

A : Both interfaces must have DHCP enabled and interfaces set to LAN and DMZ roles assigned.

B : Both interfaces must have the interface role assigned.

C : Both interfaces must have directly connected routes on the routing table.

D : Both interfaces must have IP addresses assigned.

Answer: C,D

Question 3

What are two characteristics of HA cluster heartbeat IP addresses in a FortiGate device? (Choose two.)

Options :

A : Heartbeat IP addresses are used to distinguish between cluster members.

B : The heartbeat interface of the primary device in the cluster is always assigned IP address 169.254.0.1.

C : A change in the heartbeat IP address happens when a FortiGate device joins or leaves the cluster.

D : Heartbeat interfaces have virtual IP addresses that are manually assigned.

Answer: A,C

Question 4

Refer to the exhibits.An administrator has observed the performance status outputs on an HA cluster for 55 seconds. Which FortiGate is the primary?

Options :

A : HQ-NGFW-1 with the parameter memory-failover-flip-timeout setting

B : HQ-NGFW-2 with the parameter priority setting

C : HQ-NGFW-1 with the parameter override setting

D : HQ-NGFW-2 with the parameter memory-failover-threshold setting

Answer: D

Question 5

A network administrator has enabled full SSL inspection and web filtering on FortiGate. When visiting any HTTPS websites, the browser reports certificate warning errors. When visiting HTTP websites, the browser does not report errors. What is the reason for the certificate warning errors?

Options :

A : The option invalid SSL certificates is set to allow on the SSL/SSH inspection profile.

B : The matching firewall policy is set to proxy inspection mode.

C : The browser does not trust the certificate used by FortiGate for SSL inspection.

D : The certificate used by FortiGate for SSL inspection does not contain the required certificate extensions.

Answer: C

Confidently Practice Online with Free NSE4_FGT_AD-7.6 Exam Cram

Buying Options: