Free Fortinet NSE4_FGT_AD-7.6 Exam Questions

Question 1

A network administrator has enabled full SSL inspection and web filtering on FortiGate. When visiting any HTTPS websites, the browser reports certificate warning errors. When visiting HTTP websites, the browser does not report errors. What is the reason for the certificate warning errors?

A : The option invalid SSL certificates is set to allow on the SSL/SSH inspection profile.

B : The matching firewall policy is set to proxy inspection mode.

C : The browser does not trust the certificate used by FortiGate for SSL inspection.

D : The certificate used by FortiGate for SSL inspection does not contain the required certificate extensions.

Answer: C

Question 2

Which two components are part of the secure internet access (SIA) agent-based mode on FortiSASE? (Choose two.)

A : FortiSASE Firewall-as-a-Service (FWaaS)

B : The proxy auto-configuration (PAC) file

C : VPN policies

D : FortiExtender

Answer: A,C

Question 3

You have implemented the application sensor and the corresponding firewall policy as shown in the exhibits.You cannot access any of the Google applications, but you are able to access www.fortinet.com . What would you do to resolve this issue?

A : Change the Inspection mode to Proxy-based.

B : Set SSL inspection to deep-content-inspection.

C : Move up Google in the Application and Filter Overrides section to set its priority to 1.

D : Move up Google in the Application and Filter Overrides section to set its priority to 1.

Answer: C

Question 4

You have implemented the application sensor and the corresponding firewall policy as shown in the exhibits.You cannot access any of the Google applications, but you are able to access www.fortinet.com . What would you do to resolve this issue?

A : Change the Inspection mode to Proxy-based.

B : Set SSL inspection to deep-content-inspection.

C : Move up Google in the Application and Filter Overrides section to set its priority to 1.

D : Move up Google in the Application and Filter Overrides section to set its priority to 1.

Answer: C

Question 5

Which two components are part of the secure internet access (SIA) agent-based mode on FortiSASE? (Choose two.)

A : FortiSASE Firewall-as-a-Service (FWaaS)

B : The proxy auto-configuration (PAC) file

C : VPN policies

D : FortiExtender

Answer: A,C