NSE4_FGT-7.2 無料問題集「Fortinet NSE 4 - FortiOS 7.2」

（A）No new log is recorded until you manually clear logs from the local disk.

（B）Logs are overwritten and the only warning is issued when log disk use reaches the threshold of 95%.

（C）No new log is recorded after the warning is issued when log disk use reaches the threshold of 95%.

（D）Logs are overwritten and the first warning is issued when log disk use reaches the threshold of 75%.

（A）The firmware image must be manually uploaded to each FortiGate.

（B）Uninterruptable upgrade is enabled by default.

（C）Traffic load balancing is temporally disabled while upgrading the firmware.

（D）Only secondary FortiGate devices are rebooted.

（A）FortiGate uses the SMB protocol to read the event viewer logs from the DCs.

（B）FortiGate does not support workstation check .

（C）FortiGate uses the AD server as the collector agent.

（D）FortiGate directs the collector agent to use a remote LDAP server.

（A）Application control does not display a replacement message for a blocked web application.

（B）Application control does not require SSL inspection to identity web applications.

（C）Application control can identity child and parent applications, and perform different actions on them.

（D）Application control signatures are organized in a nonhierarchical structure.

（A）Change the csf setting on Local-FortiGate (root) to set fabric-object-unification default.

（B）Change the csf setting on ISFW (downstream) to set configuration-sync local.

（C）Change the csf setting on ISFW (downstream) to set authorization-request-type certificate.

（D）Change the csf setting on both devices to set downstream-access enable.

（A）The client FortiGate uses the SSL VPN tunnel interface type to connect SSL VPN.

（B）The client FortiGate requires a client certificate signed by the CA on the server FortiGate.

（C）The server FortiGate requires a CA certificate to verify the client FortiGate certificate.

（D）The client FortiGate requires a manually added route to remote subnets.

（A）ADVPN is only supported with IKEv2.

（B）Tunnels are negotiated dynamically between spokes.

（C）Every spoke requires a static tunnel to be configured to other spokes so that phase 1 and phase 2 proposals are defined in advance.

（D）It requires the use of dynamic routing protocols so that spokes can learn the routes to other spokes.

（A）Heartbeat interfaces have virtual IP addresses that are manually assigned.

（B）The primary device in the cluster is always assigned IP address 169.254.0.1.

（C）A change in the virtual IP address happens when a FortiGate device joins or leaves the cluster.

（D）Virtual IP addresses are used to distinguish between cluster members.

（A）It does not require a separate FortiGuard license.

（B）Video filtering FortiGuard categories are based on web filter FortiGuard categories.

（C）Full SSL inspection is not required.

（D）its available only on a proxy-based firewall policy.

（A）The flow-based inspection is used, which resets the last packet to the user.

（B）The firewall policy performs the full content inspection on the file.

（C）The intrusion prevention security profile needs to be enabled when using flow-based inspection mode.

（D）The volume of traffic being inspected is too high for this model of FortiGate.