Free Fortinet NSE4_FGT_AD-7.6 Exam Dumps Questions & Answers

What are two characteristics of HA cluster heartbeat IP addresses in a FortiGate device? (Choose two.)

• A.  A change in the heartbeat IP address happens when a FortiGate device joins or leaves the cluster.
• B.  The heartbeat interface of the primary device in the cluster is always assigned IP address 169.254.0.1.
• C.  Heartbeat IP addresses are used to distinguish between cluster members.
• D.  Heartbeat interfaces have virtual IP addresses that are manually assigned.

You have configured the FortiGate device for FSSO. A user is successful in log-in to Windows, but their access to the internet is denied. What should the administrator check first? (Choose one answer)

• A.  The FortiGate FSSO active users list for user ' s IP address.
• B.  The Windows event viewer for failed login attempts.
• C.  The FortiGate firewall policy settings for SSL decryption.
• D.  Whether the user is assigned to the correct AD group.

Refer to the exhibit.

The administrator configured SD-WAN rules and set the FortiGate traffic log page to display SD-WAN- specific columns: SD-WAN Quality and SD-WAN Rule Name FortiGate allows the traffic according to policy ID 1 placed at the top. This is the policy that allows SD-WAN traffic. Despite these settings, the traffic logs do not show the name of the SD-WAN rule used to steer those traffic flows What could be the reason?

• A.  SD-WAN rule names do not appear immediately. The administrator must refresh the page.
• B.  There is no application control profile applied to the firewall policy.
• C.  Destinations in the SD-WAN rules are configured for each application, but feature visibility is not enabled.
• D.  FortiGate load balanced the traffic according to the implicit SD-WAN rule.

You have implemented the application sensor and the corresponding firewall policy as shown in the exhibits.


You cannot access any of the Google applications, but you are able to access www.fortinet.com .
What would you do to resolve this issue?

• A.  Add Google .com to the URL category in the security profile.
• B.  Set SSL inspection to deep-content-inspection.
• C.  Change the Inspection mode to Proxy-based.
• D.  Move up Google in the Application and Filter Overrides section to set its priority to 1.

The FortiGate device HQ-NGFW-1 with the IP address 10.0.13.254 sends logs to the FortiAnalyzer device with the IP address 10.0.13.125. The administrator wants to verify that reliable logging is enabled on HQ- NGFW-1.
Which exhibit helps with the verification?

• A. 
• B. 
• C. 
• D.