[2022] Pass Fortinet NSE4_FGT-7.0 Exam in First Attempt Easily [Q67-Q81]

Q67. Which two configuration settings are synchronized when FortiGate devices are in an active-active HA cluster? (Choose two.)

Q68. Which Security rating scorecard helps identify configuration weakness and best practice violations in your network?

Q69. Which two statements are correct regarding FortiGate FSSO agentless polling mode? (Choose two.)

Q70. The HTTP inspection process in web filtering follows a specific order when multiple features are enabled in the web filter profile.
What order must FortiGate use when the web filter profile has features enabled, such as safe search?

Q71. Which certificate value can FortiGate use to determine the relationship between the issuer and the certificate?

Q72. A network administrator is configuring a new IPsec VPN tunnel on FortiGate. The remote peer IP address is dynamic. In addition, the remote peer does not support a dynamic DNS update service.
What type of remote gateway should the administrator configure on FortiGate for the new IPsec VPN tunnel to work?

Q73. Refer to the exhibit.

Given the routing database shown in the exhibit, which two statements are correct? (Choose two.)

Q74. Which two settings can be separately configured per VDOM on a FortiGate device? (Choose two.)

Q75. Which two protocols are used to enable administrator access of a FortiGate device? (Choose two.)

Q76. Which two VDOMs are the default VDOMs created when FortiGate is set up in split VDOM mode? (Choose two.)

Q77. An administrator wants to configure Dead Peer Detection (DPD) on IPSEC VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when no traffic is observed in the tunnel.
Which DPD mode on FortiGate will meet the above requirement?

Q78. Which two statements about SSL VPN between two FortiGate devices are true? (Choose two.)

Q79. Which of the following statements about backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)

Q80. Which security feature does FortiGate provide to protect servers located in the internal networks from attacks such as SQL injections?

Q81. An administrator has configured a strict RPF check on FortiGate. Which statement is true about the strict RPF check?