NSE4_FGT-7.2 were last updated at March 30, 2023.

The exhibits show the firewall policies and the objects used in the firewall policies.

The administrator is using the Policy Lookup feature and has entered the search criteria shown in the exhibit.

（含图）

（含图）

Which policy will be highlighted, based on the input criteria?

In this scenario, what are two requirements for the VLAN ID? (Choose two.) 

How does strict RPF check work?

config system settings

set ses-denied-traffic enable

end

config system global

set block-session-timer 30

end

What are the two results of this configuration? (Choose two.) 

The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) for Facebook.

Users are given access to the Facebook web application. They can play video content hosted on

Facebook, but they are unable to leave reactions on videos or other types of posts.

（含图）

（含图）

Which part of the policy configuration must you change to resolve the issue?

An administrator creates a new address object on the root FortiGate (Local-FortiGate) in the security fabric. After synchronization, this object is not available on the downstream FortiGate (ISFW).

（含图）

What must the administrator do to synchronize the address object?

Exhibit A shows system performance output. Exhibit B shows a FortiGate configured with the default configuration of high memory usage thresholds.

（含图）

Based on the system performance output, which two results are correct? (Choose two.)

（含图）

What two conclusions can you make from the debug flow output? (Choose two.)

Which subnet must the administrator configure for the local quick mode selector for site B?

The exhibits contain a network diagram, and virtual IP, IP pool, and firewall policies configuration information.

The WAN (port1) interface has the IP address 10.200.1.1/24.

The LAN (port3) interface has the IP address 10.0.1.254/24.

The first firewall policy has NAT enabled using IP pool.

The second firewall policy is configured with a VIP as the destination address

（含图）

（含图）

Which IP address will be used to source NAT (SNAT) the internet traffic coming from a workstation with the IP address 10.0.1.10?

The exhibit shows a diagram of a FortiGate device connected to the network, the firewall policy and VIP configuration on the FortiGate device, and the routing table on the ISP router.

When the administrator tries to access the web server public address (203.0.113.2) from the internet, the connection times out. At the same time, the administrator runs a sniffer on FortiGate to capture incoming web traffic to the server and does not see any output.

（含图）

Based on the information shown in the exhibit, what configuration change must the administrator make to fix the connectivity issue?

All traffic must be routed through the primary tunnel when both tunnels are up. The secondary tunnel must be used only if the primary tunnel goes down. In addition, FortiGate should be able to detect a dead tunnel to speed up tunnel failover.

Which two key configuration changes must the administrator make on FortiGate to meet the requirements? (Choose two.)

Which two syntaxes are correct to configure a web rating override for the home page? (Choose two.)

An administrator configured the web filtering profile shown in the exhibit to block access to all social networking sites except Twitter. However, when users try to access twitter.com, they are redirected to a FortiGuard web filtering block page.

（含图）

Based on the exhibit, which configuration change can the administrator make to allow Twitter while blocking all other social networking sites?