Free Access to Fortinet.NSE4_FGT-7.2.v2024-06-30.q112 with Valid Practice Test (Page 12)

Question 51

Why does FortiGate Keep TCP sessions in the session table for several seconds, even after both sides (client and server) have terminated the session?

A.To allow for out-of-order packets that could arrive after the FIN/ACK packets
B.To finish any inspection operations
C.To remove the NAT operation
D.To generate logs

Question 52

When a firewall policy is created, which attribute is added to the policy to support recording logs to a FortiAnalyzer or a FortiManager and improves functionality when a FortiGate is integrated with these devices?

A.Log ID
B.Universally Unique Identifier
C.Policy ID
D.Sequence ID

Question 53

Which statement is correct regarding the use of application control for inspecting web applications?

A.Application control can identity child and parent applications, and perform different actions on them.
B.Application control signatures are organized in a nonhierarchical structure.
C.Application control does not require SSL inspection to identity web applications.
D.Application control does not display a replacement message for a blocked web application.

Question 54

Refer to the exhibit.

The exhibit contains a network diagram, central SNAT policy, and IP pool configuration.
The WAN (port1) interface has the IP address 10.200. 1. 1/24.
The LAN (port3) interface has the IP address 10.0. 1.254/24.
A firewall policy is configured to allow to destinations from LAN (port3) to WAN (port1).
Central NAT is enabled, so NAT settings from matching Central SNAT policies will be applied.
Which IP address will be used to source NAT the traffic, if the user on Local-Client (10.0. 1. 10) pings the IP address of Remote-FortiGate (10.200.3. 1)?