NSE4_FGT_AD-7.6 무료 덤프문제 온라인 액세스

Refer to the exhibit. Review the intrusion prevention system (IPS) profile signature settings shown in the exhibit.
What can you conclude about the signature when adding the FTP.Login.Failed signature to the IPS Sensor profile?

• A.The signature setting includes a group of other signatures.
• B.FortiGate stores a local copy of the packet that matches the signature.
• C.FortiGate allows this low severity signature packet and creates a log.
• D.The signature setting uses a custom rating threshold

A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes.
All traffic must be routed through the primary tunnel when both tunnels are up. The secondary tunnel must be used only if the primary tunnel goes down. In addition, FortiGate should be able to detect a dead tunnel to speed up tunnel failover.
Which two key configuration changes must the administrator make on FortiGate to meet the requirements? (Choose two.)

• A.Configure a lower distance on the static route for the primary tunnel, and a higher distance on the static route for the secondary tunnel.
• B.Use the VPN wizard to create an IPsec template for a redundant IPsec VPN tunnel.
• C.Enable Dead Peer Detection.
• D.In the phase1-interface, enable npu-offload to detect a dead tunnel.

You have configured an application control profile, set peer-to-peer traffic to Block under the Categories tab, and applied it to the firewall policy. However, your peer-to-peer traffic on known ports is passing through the FortiGate without being blocked. What FortiGate settings should you check to resolve this issue?

• A.Replacement Messages for UDP-based Applications
• B.FortiGuard category ratings
• C.Network Protocol Enforcement
• D.Application and Filter Overrides

Which two statements are true regarding FortiGate HA configuration synchronization? (Choose two.)

• A.Incremental configuration synchronization can occur only from changes made on the primary FortiGate device.
• B.Checksums of devices are compared against each other to ensure configurations are the same.
• C.Incremental configuration synchronization can occur from changes made on any FortiGate device within the HA cluster.
• D.Checksums of devices will be different from each other because some configuration items are not synced to other HA members.

When FortiGate performs SSL/SSH full inspection, you can decide how it should react when it detects an invalid certificate.
Which three actions are valid actions that FortiGate can perform when it detects an invalid certificate? (Choose three.)

• A.Allow
• B.Allow & Warning
• C.Trust & Allow
• D.Block
• E.Block & Warning