Fortinet 시험의 출제 범위는 수시로 변경되므로 최신 자료가 필수적입니다. Fast2test은 NSE4_FGT-7.2 연습문제를 지속적으로 검토하고 갱신하며, 구매 후 365일 동안 무료 업데이트를 제공합니다. 2026년 최신 버전으로 Fortinet NSE 4 - FortiOS 7.2 시험에 대비하시기 바랍니다.

Fortinet NSE4_FGT-7.2 시험 개요:

Fortinet NSE4_FGT-7.2 시험 요강 주제:

Fortinet NSE 4 - FortiOS 7.2 시험, 이런 질문이 가장 많습니다

최신 Fortinet NSE 4 NSE4_FGT-7.2 무료샘플문제

문제 #1

Refer to the exhibits.
The exhibits show a network diagram and firewall configurations.
An administrator created a Deny policy with default settings to deny Webserver access for Remote-User2. Remote-User1 must be able to access the Webserver. Remote-User2 must not be able to access the Webserver.


In this scenario, which two changes can the administrator make to deny Webserver access for Remote-User2? (Choose two.)

A. Disable match-vip in the Deny policy.
B. Enable match vip in the Deny policy.
C. Set the Destination address as Deny_IP in the Allow-access policy.
D. Set the Destination address as Web_server in the Deny policy.

문제 #2

Refer to the exhibit.

The exhibit contains a network diagram, virtual IP, IP pool, and firewall policies configuration.
The WAN (port1) interface has the IP address 10.200. 1. 1/24.
The LAN (port3) interface has the IP address 10 .0.1.254. /24.
The first firewall policy has NAT enabled using IP Pool.
The second firewall policy is configured with a VIP as the destination address.
Which IP address will be used to source NAT the internet traffic coming from a workstation with the IP address 10.0. 1. 10?

A. 10.200. 1. 1
B. 10.200. 1. 100
C. 10.200. 1. 10
D. 10.200.3. 1

문제 #3

Refer to the exhibit.

Given the routing database shown in the exhibit, which two statements are correct? (Choose two.)

A. The port3 default route has the lowest metric.
B. There will be eight routes active in the routing table.
C. The ports default route has the highest distance.
D. The port1 and port2 default routes are active in the routing table.

문제 #4

Which of the following SD-WAN load balancing method use interface weight value to distribute traffic? (Choose two.)

A. Source IP
B. Session
C. Volume
D. Spillover

문제 #5

Refer to the exhibits.


An administrator creates a new address object on the root FortiGate (Local-FortiGate) in the security fabric. After synchronization, this object is not available on the downstream FortiGate (ISFW).
What must the administrator do to synchronize the address object?

A. Change the csf setting on ISFW (downstream) to set configuration-sync local.
B. Change the csf setting on both devices to set downstream-access enable.
C. Change the csf setting on Local-FortiGate (root) to set fabric-object-unification default.
D. Change the csf setting on ISFW (downstream) to set authorization-request-type certificate.

질문과 대답: