Fortinet NSE4_FGT-5.6 Online Practice Questions and Exam Preparation

Fortinet NSE4_FGT-5.6 Online Questions & Answers

• Question 1:

  Examine the following log message attributes and select two correct statements from the list below.

  (Choose two.)

  Response:

  A. The category action was set to warning.
  B. The website was allowed on the first attempt.
  C. The user was prompted to decide whether to proceed or go back.
  D. The user failed authentication.
  B. The website was allowed on the first attempt.
  C. The user was prompted to decide whether to proceed or go back.

• Question 2:

  What methods can a web browser use to learn the URL where a web proxy PAC file is located?

  (Choose two.)

  Response:

  A. Manually configuring the PAC's URL in the browser settings.
  B. Using WPAD.
  C. Manually appending the PAC URL to the destination server URL.
  D. Using the Forwarded HTTP header.
  A. Manually configuring the PAC's URL in the browser settings.
  B. Using WPAD.

• Question 3:

  To which remote devices can FortiGate send logs?

  (Choose three.)

  Response:

  A. Syslog
  B. FortiAnalyzer
  C. Hard drive
  D. Memory
  E. FortiCloud
  A. Syslog
  B. FortiAnalyzer
  C. Hard drive

• Question 4:

  An administrator is using the FortiGate built-in sniffer to capture HTTP traffic between a client and a server, however, the sniffer output shows only the packets related with TCP session setups and disconnections. Why? Response:

  A. The administrator is running the sniffer on the internal interface only.
  B. The filter used in the sniffer matches the traffic only in one direction.
  C. The FortiGate is doing content inspection.
  D. TCP traffic is being offloaded to an NP6.
  D. TCP traffic is being offloaded to an NP6.

• Question 5:

  Which statements about high availability (HA) for FortiGates are true?

  (Choose two.)

  Response:

  A. Virtual clustering can be configured between two FortiGate devices with multiple VDOM.
  B. Heartbeat interfaces are not required on the primary device.
  C. HA management interface settings are synchronized between cluster members.
  D. Sessions handled by UTM proxy cannot be synchronized.
  A. Virtual clustering can be configured between two FortiGate devices with multiple VDOM.
  C. HA management interface settings are synchronized between cluster members.

• Question 6:

  View the exhibit.

  

  Which of the following statements are correct?

  (Choose two.)

  Response:

  A. This is a redundant IPsec setup.
  B. The TunnelB route is the primary one for searching the remote site. The TunnelA route is used only if the TunnelB VPN is down.
  C. This setup requires at least two firewall policies with action set to IPsec.
  D. Dead peer detection must be disabled to support this type of IPsec setup.
  A. This is a redundant IPsec setup.
  B. The TunnelB route is the primary one for searching the remote site. The TunnelA route is used only if the TunnelB VPN is down.

• Question 7:

  Examine this output from the diagnose sys top command:

  

  Which statements about the output are true?

  (Choose two.)

  Response:

  A. sshd is the process consuming most memory
  B. sshd is the process consuming most CPU
  C. All the processes listed are in sleeping state
  D. The sshd process is using 123 pages of memory
  B. sshd is the process consuming most CPU
  C. All the processes listed are in sleeping state

• Question 8:

  An administrator is configuring an IPsec VPN between site A and B.

  The Remote Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 10.0.1.0/24 and the remote quick mode selector is 10.0.2.0/24.

  How must the administrator configure the local quick mode selector in site B?

  Response:

  A. 10.0.2.0/24
  B. 0 0.0.0.0/0 0
  C. 10.0.1.0/24
  D. 0 10.0.0.0/8
  A. 10.0.2.0/24

• Question 9:

  What is the purpose of the Policy Lookup feature? Response:

  A. It searches the matching policy based on an input criteria.
  B. It enables hidden security profiles with full logging capabilities and generates Learning Reports based on an input criteria.
  C. It finds duplicate objects in firewall policies.
  D. It creates a new firewall policy based on an input criteria.
  A. It searches the matching policy based on an input criteria.

• Question 10:

  What step is required to configure an SSL VPN to access to an internal server using port forward mode? Response:

  A. Configure the virtual IP addresses to be assigned to the SSL VPN users.
  B. Install FortiClient SSL VPN client
  C. Create a SSL VPN realm reserved for clients using port forward mode.
  D. Configure the client application to forward IP traffic to a Java applet proxy.
  D. Configure the client application to forward IP traffic to a Java applet proxy.