Free Fortinet NSE4_FGT_AD-7.6 Exam Questions

Question 1

Which two statements about the Security Fabric rating are true? (Choose two answers)

A : A license is required to obtain an executive summary in the Security Rating section.

B : The root FortiGate provides executive summaries of all the FortiGate devices in the Security Fabric.

C : The Security Posture category provides PCI compliance results.

D : Security Rating Insights are available only in the Security Rating page.

Answer: B,C

Question 2

An administrator wants to address shadow IT visibility challenges and prevent users from sending sensitive files outside the organization without proper approval. Which FortiSASE method should the administrator implement to achieve these goals? (Choose one answer)

A : Secure SD-WAN access (SSD-WAN)

B : Secure private access (SPA)

C : Secure SaaS access (SSA)

D : Secure internet access (SIA)

Answer: C

Question 3

You have configured an application control profile, set peer-to-peer traffic to Block under the Categories tab. and applied it to the firewall policy. However, your peer-to-peer traffic on known ports is passing through the FortiGate without being blocked. What FortiGate settings should you check to resolve this issue?

A : FortiGuard category ratings

B : Network Protocol Enforcement

C : Replacement Messages for UDP-based Applications

D : Application and Filter Overrides

Answer: B

Question 4

You have implemented the application sensor and the corresponding firewall policy as shown in the exhibits.You cannot access any of the Google applications, but you are able to access www.fortinet.com . What would you do to resolve this issue?

A : Change the Inspection mode to Proxy-based.

B : Set SSL inspection to deep-content-inspection.

C : Move up Google in the Application and Filter Overrides section to set its priority to 1.

D : Move up Google in the Application and Filter Overrides section to set its priority to 1.