[Q98-Q119] Fortinet NSE 4 – FortiOS 7.2 Practice Tests 2024 Pass C-HRHFC-2311 with confidence!

NO.98 Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy-based inspection mode? (Choose two.)

NO.99 Which two configuration settings are synchronized when FortiGate devices are in an active-active HA cluster? (Choose two.)

NO.100 Refer to the exhibit to view the application control profile.

Based on the configuration, what will happen to Apple FaceTime?

NO.101 Refer to the exhibit.
An administrator added a configuration for a new RADIUS server. While configuring, the administrator selected the Include in every user group option.

What is the impact of using the Include in every user group option in a RADIUS configuration?

NO.102 Refer to the exhibits.


The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) for Facebook .
Users are given access to the Facebook web application. They can play video content hosted on Facebook but they are unable to leave reactions on videos or other types of posts.
Which part of the policy configuration must you change to resolve the issue?

NO.103 Which engine handles application control traffic on the next-generation firewall (NGFW) FortiGate?

NO.104 An administrator is running the following sniffer command:
Which three pieces of Information will be Included in me sniffer output? {Choose three.)

NO.105 In which two ways can RPF checking be disabled? (Choose two )

NO.106 Why does FortiGate Keep TCP sessions in the session table for several seconds, even after both sides (client and server) have terminated the session?

NO.107 If Internet Service is already selected as Destination in a firewall policy, which other configuration object can be selected for the Destination field of a firewall policy?

NO.108 Which two settings can be separately configured per VDOM on a FortiGate device? (Choose two.)

NO.109 FortiGate is operating in NAT mode and is configured with two virtual LAN (VLAN) subinterfaces added to the same physical interface.
In this scenario, which statement about VLAN IDs is true?

NO.110 Which statement about video filtering on FortiGate is true?

NO.111 Refer to the exhibit.

Given the interfaces shown in the exhibit. which two statements are true? (Choose two.)

NO.112 Refer to the exhibit.

The global settings on a FortiGate device must be changed to align with company security policies. What does the Administrator account need to access the FortiGate global settings?

NO.113 A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 fails to come up. The administrator has also re-entered the pre-shared key on both FortiGate devices to make sure they match.

Based on the phase 1 configuration and the diagram shown in the exhibit, which two configuration changes will bring phase 1 up? (Choose two.)

NO.114 Refer to the exhibit.

An administrator is running a sniffer command as shown in the exhibit.
Which three pieces of information are included in the sniffer output? (Choose three.)

NO.115 Which of the following conditions must be met in order for a web browser to trust a web server certificate signed by a third-party CA?

NO.116 Refer to the exhibit.

Based on the ZTNA tag, the security posture of the remote endpoint has changed.
What will happen to endpoint active ZTNA sessions?

NO.117 Refer to the exhibit.

Given the routing database shown in the exhibit, which two statements are correct? (Choose two.)

NO.118 Which statement about video filtering on FortiGate is true?

NO.119 An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)