Download Fortinet.NSE4_FGT-7.0.CertDumps.2023-01-01.172q.tqb
| Vendor: | Fortinet |
| Exam Code: | NSE4_FGT-7.0 |
| Exam Name: | Fortinet NSE 4 - FortiOS 7.0 |
| Date: | Jan 01, 2023 |
| File Size: | 12 MB |
Demo Questions
Question 1
Which two statements about antivirus scanning mode are true? (Choose two.)
- In proxy-based inspection mode, files bigger than the buffer size are scanned.
- In flow-based inspection mode, FortiGate buffers the file, but also simultaneously transmits it to the client.
- In proxy-based inspection mode, antivirus scanning buffers the whole file for scanning, before sending it to the client.
- In flow-based inspection mode, files bigger than the buffer size are scanned.
Correct answer: BC
Explanation:
An antivirus profile in full scan mode buffers up to your specified file size limit. The default is 10 MB. That is large enough for most files, except video files. If your FortiGate model has more RAM, you may be able to increase this threshold. Without a limit, very large files could exhaust the scan memory. So, this threshold balances risk and performance. Is this tradeoff unique to FortiGate, or to a specific model? No.Regardless of vendor or model, you must make a choice. This is because of the difference between scans in theory, that have no limits, and scans on real-world devices, that have finite RAM. In order to detect 100% of malware regardless of file size, a firewall would need infinitely large RAM--something that no device has in the real world. Most viruses are very small. This table shows a typical tradeoff. You can see that with the default 10 MB threshold, only 0.01% of viruses pass through. An antivirus profile in full scan mode buffers up to your specified file size limit. The default is 10 MB. That is large enough for most files, except video files. If your FortiGate model has more RAM, you may be able to increase this threshold. Without a limit, very large files could exhaust the scan memory. So, this threshold balances risk and performance. Is this tradeoff unique to FortiGate, or to a specific model? No.
Regardless of vendor or model, you must make a choice. This is because of the difference between scans in theory, that have no limits, and scans on real-world devices, that have finite RAM. In order to detect 100% of malware regardless of file size, a firewall would need infinitely large RAM--something that no device has in the real world. Most viruses are very small. This table shows a typical tradeoff. You can see that with the default 10 MB threshold, only 0.01% of viruses pass through.
Question 2
FortiGuard categories can be overridden and defined in different categories. To create a web rating override for example.com home page, the override must be configured using a specific syntax.
Which two syntaxes are correct to configure web rating for the home page? (Choose two.)
- www.example.com:443
- example.com
Correct answer: BC
Explanation:
FortiGate_Security_6.4 page 384When using FortiGuard category filtering to allow or block access to a website, one option is to make a web rating override and define the website in a different category. Web ratings are only for host names--"no URLs or wildcard characters are allowed". FortiGate_Security_6.4 page 384
When using FortiGuard category filtering to allow or block access to a website, one option is to make a web rating override and define the website in a different category. Web ratings are only for host names--"no URLs or wildcard characters are allowed".
Question 3
An administrator is configuring an IPsec VPN between site A and site A. The Remote Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192.168.1.0/24 and the remote quick mode selector is 192.168.2.0/24.Which subnet must the administrator configure for the local quick mode selector for site B?
- 192.168.1.0/24
- 192.168.0.0/24
- 192.168.2.0/24
- 192.168.3.0/24
Correct answer: C
