SAP Fortinet NSE 4 - FortiOS 7.2 - C_HRHFC_2311 Exam Questions

QUESTION NO: 1
An administrator configures FortiGuard servers as DNS servers on FortiGate using default settings.
What is true about the DNS connection to a FortiGuard server?

QUESTION NO: 2
Which of the following statements about backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)

QUESTION NO: 3
Refer to the exhibits.
The exhibits show a network diagram and firewall configurations.
An administrator created a Deny policy with default settings to deny Webserver access for Remote-User2. Remote-User1 must be able to access the Webserver. Remote-User2 must not be able to access the Webserver.


In this scenario, which two changes can the administrator make to deny Webserver access for Remote-User2? (Choose two.)

QUESTION NO: 4
An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

QUESTION NO: 5
Which statement is correct regarding the security fabric?

QUESTION NO: 6
What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?

QUESTION NO: 7
Which two statements are correct regarding FortiGate FSSO agentless polling mode? (Choose two.)

QUESTION NO: 8
Refer to the exhibits.
The exhibits show the firewall policies and the objects used in the firewall policies.
The administrator is using the Policy Lookup feature and has entered the search criteria shown in the exhibit.

Which policy will be highlighted, based on the input criteria?

QUESTION NO: 9
Which two protocol options are available on the CLI but not on the GUI when configuring an SD-WAN Performance SLA? (Choose two.)