NSE4_FGT-7.0 Exam - Free Actual Q&As, Page 1

NSE4_FGT-7.0 Actual Exam Questions

Last updated on March 13, 2025.

Vendor:Fortinet

Exam Code:NSE4_FGT-7.0

Exam Name:Fortinet NSE 4 - FortiOS 7.0

Exam Questions:106

Topic 1 - Single Topic

Question #1 Topic 1

Which two statements about FortiGate FSSO agentless polling mode are true? (Choose two.)

A. FortiGate uses the AD server as the collector agent.
B. FortiGate uses the SMB protocol to read the event viewer logs from the DCs.
C. FortiGate does not support workstation check.
D. FortiGate directs the collector agent to use a remote LDAP server.

Reveal Solution Discussion 46

Correct Answer: BC 🗳️

Question #2 Topic 1

FortiGuard categories can be overridden and defined in different categories. To create a web rating override for example.com home page, the override must be configured using a specific syntax.
Which two syntaxes are correct to configure web rating override for the home page? (Choose two.)

A. www.exaple.com
B. www.example.com/index.html
C. example.com
D. www.example.com:443

Reveal Solution Discussion 12

Correct Answer: AC 🗳️

Question #3 Topic 1

Refer to the exhibits to view the firewall policy (Exhibit A) and the antivirus profile (Exhibit B).
Exhibit A.

Exhibit B.

Which statement is correct if a user is unable to receive a block replacement message when downloading an infected file for the first time?

A. The flow-based inspection is used, which resets the last packet to the user.
B. The volume of traffic being inspected is too high for this model of FortiGate.
C. The firewall policy performs the full content inspection on the file.
D. The intrusion prevention security profile needs to be enabled when using flow-based inspection mode.