NSE4_FGT-6.0 by Fortinet Actual Free Exam Questions And Answers

Question 1

Which statements about DNS filter profiles are true? (Choose two.)

A. They can block DNS requests to known botnet command and control servers.

B. They can inspect HTTP traffic.

C. They must be applied in firewall policies with SSL inspection enabled.

D. They can redirect blocked requests to a specific portal.

Discussion 0

Correct Answer: A,D Vote an answer

Question 2

An administrator is configuring an Ipsec between site A and siteB. The Remotes Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192.16.1.0/24 and the remote quick mode selector is 192.16.2.0/24. How must the administrator configure the local quick mode selector for site B?

A. 192.168.1.0/24

B. 192.168.0.0/8

C. 192.168.3.0/24

D. 192.168.2.0/24

Discussion 0

Correct Answer: D Vote an answer

Question 3

Examine this FortiGate configuration:

How does the FortiGate handle web proxy traffic coming from the IP address 10.2.1.200 that requires authorization?

A. It authenticates the traffic using the authentication scheme SCHEME1.

B. It drops the traffic.

C. It authenticates the traffic using the authentication scheme SCHEME2.

D. It always authorizes the traffic without requiring authentication.

Discussion 0

Correct Answer: A Vote an answer

Question 4

Which of the following route attributes must be equal for static routes to be eligible for equal cost multipath (ECMP) routing? (Choose two.)

A. Cost

B. Priority

C. Metric

D. Distance

Discussion 0

Correct Answer: B,D Vote an answer

Question 5

What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?

A. It limits the scope of application control to the browser-based technology category only.

B. It limits the scope of application control to scan application traffic using parent signatures only

C. It limits the scope of application control to scan application traffic on DNS protocol only.

D. It limits the scope of application control to scan application traffic based on application category only.

Discussion 0

Correct Answer: D Vote an answer

Question 6

You have tasked to design a new IPsec deployment with the following criteria:
Which topology should be used to satisfy all of the requirements?

A. Redundant

B. Partial mesh

C. Hub-and-spoke

D. Fully meshed

Discussion 0

Correct Answer: C Vote an answer

Question 7

How does FortiGate select the central SNAT policy that is applied to a TCP session?

A. It selects the first matching central SNAT policy, reviewing from top to bottom.

B. It selects the central SNAT policy with the lowest priority.

C. It selects the SNAT policy specified in the configuration of the firewall policy that matches the traffic.

D. It selects the SNAT policy specified in the configuration of the outgoing interface.

Discussion 0

Correct Answer: A Vote an answer

Fortinet NSE 4 - FortiOS 6.0 - NSE4_FGT-6.0 Exam Practice Test

Contact Us

Useful Links

Latest Updated