SAP Fortinet NSE 4 - FortiOS 7.2 - C-HRHFC-2311 Exam Practice Test

Which two types of traffic are managed only by the management VDOM? (Choose two.)

Which two statements are correct regarding FortiGate HA cluster virtual IP addresses? (Choose two.)

An administrator wants to simplify remote access without asking users to provide user credentials.
Which access control method provides this solution?

How does FortiGate act when using SSL VPN in web mode?

Refer to the exhibits.


The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) for Facebook .
Users are given access to the Facebook web application. They can play video content hosted on Facebook but they are unable to leave reactions on videos or other types of posts.
Which part of the policy configuration must you change to resolve the issue?

A network administrator has enabled full SSL inspection and web filtering on FortiGate. When visiting any HTTPS websites, the browser reports certificate warning errors. When visiting HTTP websites, the browser does not report errors.
What is the reason for the certificate warning errors?

Refer to the exhibits.
The exhibits show the firewall policies and the objects used in the firewall policies.
The administrator is using the Policy Lookup feature and has entered the search criteria shown in the exhibit.

Which policy will be highlighted, based on the input criteria?

Which certificate value can FortiGate use to determine the relationship between the issuer and the certificate?

Which two statements are correct about a software switch on FortiGate? (Choose two.)

Refer to the exhibit.

Given the security fabric topology shown in the exhibit, which two statements are true? (Choose two.)

An administrator has configured two-factor authentication to strengthen SSL VPN access. Which additional best practice can an administrator implement?