2023 Valid NSE4_FGT-7.2 test answers & Fortinet Exam PDF [Q87-Q101]

NO.87 A network administrator has enabled full SSL inspection and web filtering on FortiGate. When visiting any HTTPS websites, the browser reports certificate warning errors. When visiting HTTP websites, the browser does not report errors.
What is the reason for the certificate warning errors?

NO.88 Which two statements ate true about the Security Fabric rating? (Choose two.)

NO.89 An administrator does not want to report the logon events of service accounts to FortiGate. What setting on the collector agent is required to achieve this?

NO.90 Refer to the exhibits.


Exhibit A shows system performance output. Exhibit B shows a FortiGate configured with the default configuration of high memory usage thresholds. Based on the system performance output, which two statements are correct? (Choose two.)

NO.91 Which two configuration settings are synchronized when FortiGate devices are in an active-active HA cluster? (Choose two.)

NO.92 FortiGate is operating in NAT mode and is configured with two virtual LAN (VLAN) subinterfaces added to the same physical interface.
In this scenario, which statement about VLAN IDs is true?

NO.93 Which statement regarding the firewall policy authentication timeout is true?

NO.94 Which two protocol options are available on the CLI but not on the GUI when configuring an SD-WAN Performance SLA? (Choose two.)

NO.95 Which two statements are correct about NGFW Policy-based mode? (Choose two.)

NO.96 Examine the exhibit, which contains a virtual IP and firewall policy configuration.


The WAN (port1) interface has the IP address 10.200. 1. 1/24. The LAN (port2) interface has the IP address 10.0. 1.254/24.
The first firewall policy has NAT enabled on the outgoing interface address. The second firewall policy is configured with a VIP as the destination address. Which IP address will be used to source NAT the Internet traffic coming from a workstation with the IP address 10.0. 1. 10/24?

NO.97 Which three options are the remote log storage options you can configure on FortiGate? (Choose three.)

NO.98 Which three methods are used by the collector agent for AD polling? (Choose three.)

NO.99 Refer to the exhibit.
The exhibit shows the output of a diagnose command.

What does the output reveal about the policy route?

NO.100 Which statement about the IP authentication header (AH) used by IPsec is true?

NO.101 Refer to the exhibit.

The exhibit contains a network diagram, virtual IP, IP pool, and firewall policies configuration.
The WAN (port1) interface has the IP address 10.200. 1. 1/24.
The LAN (port3) interface has the IP address 10 .0.1.254. /24.
The first firewall policy has NAT enabled using IP Pool.
The second firewall policy is configured with a VIP as the destination address.
Which IP address will be used to source NAT the internet traffic coming from a workstation with the IP address 10.0. 1. 10?