Free Access to Fortinet.NSE4_FGT-7.0.v2022-07-13.q61 with Valid Practice Test (Page 5)

Question 16

An administrator wants to configure timeouts for users. Regardless of the user behavior, the timer should start as soon as the user authenticates and expire after the configured value.
Which timeout option should be configured on FortiGate?

A.new-session
B.soft-timeout
C.hard-timeout
D.idle-timeout
E.auth-on-demand

Question 17

Examine this PAC file configuration.

Which of the following statements are true? (Choose two.)

A.Browsers can be configured to retrieve this PAC file from the FortiGate.
B.Any web request to the 172.25.120.0/24 subnet is allowed to bypass the proxy.
C.All requests not made to Fortinet.com or the 172.25.120.0/24 subnet, have to go through altproxy.corp.com: 8060.
D.Any web request fortinet.com is allowed to bypass the proxy.

Question 18

Refer to the FortiGuard connection debug output.

Based on the output shown in the exhibit, which two statements are correct? (Choose two.)

A.FortiGate is using default FortiGuard communication settings.
B.There is at least one server that lost packets consecutively.
C.One server was contacted to retrieve the contract information.
D.A local FortiManager is one of the servers FortiGate communicates with.

Question 19

Refer to the exhibit.

The exhibit contains a network diagram, central SNAT policy, and IP pool configuration.
The WAN (port1) interface has the IP address 10.200.1.1/24.
The LAN (port3) interface has the IP address 10.0.1.254/24.
A firewall policy is configured to allow to destinations from LAN (port3) to WAN (port1).
Central NAT is enabled, so NAT settings from matching Central SNAT policies will be applied.
Which IP address will be used to source NAT the traffic, if the user on Local-Client (10.0.1.10) pings the IP address of Remote-FortiGate (10.200.3.1)?