Fortinet NSE4_FGT-5.6 Online Practice Questions and Exam Preparation

Fortinet NSE4_FGT-5.6 Online Questions & Answers

• Question 1:

  What methods can you use to back up logs?

  (Choose three.)

  Response:

  A. SNMP
  B. USB
  C. SFTP
  D. TFTP
  E. FTP
  B. USB
  D. TFTP
  E. FTP

• Question 2:

  Which of the following statements about advanced AD access mode for the FSSO collector agent are true? (Choose two.) Response:

  A. FortiGate can act as an LDAP client to configure the group filters.
  B. It is only supported if DC agents are deployed.
  C. It supports monitoring of nested groups.
  D. It uses the Windows convention for naming; that is, Domain\Username.
  A. FortiGate can act as an LDAP client to configure the group filters.
  B. It is only supported if DC agents are deployed.

• Question 3:

  Which of the following protocols is used to encrypt the user data payload in an IPsec tunnel? Response:

  A. AH
  B. IKE
  C. ISAKMP
  D. ESP
  D. ESP

• Question 4:

  What is Diffie Hellman? Response:

  A. An algorithm and agreement method for two peers to independently calculate a common private key after sharing only their public keys
  B. An algorithm for generating a public and private key
  C. An agreement method for authenticating two peers using a pre-shared key
  D. An agreement method for negotiating an IKE security association (SA)
  A. An algorithm and agreement method for two peers to independently calculate a common private key after sharing only their public keys

• Question 5:

  Which of the following web filtering modes apply to full URL inspection?

  (Choose two.)

  Response:

  A. Proxy-based
  B. DNS-based
  C. Policy-based
  D. Flow-based E. IP-based
  A. Proxy-based
  B. DNS-based

• Question 6:

  What is the purpose of the Policy Lookup feature? Response:

  A. It searches the matching policy based on an input criteria.
  B. It enables hidden security profiles with full logging capabilities and generates Learning Reports based on an input criteria.
  C. It finds duplicate objects in firewall policies.
  D. It creates a new firewall policy based on an input criteria.
  A. It searches the matching policy based on an input criteria.

• Question 7:

  Which statements are true regarding incoming and outgoing interfaces in firewall policies?

  (Choose two.)

  Response:

  A. An incoming interface is mandatory in a firewall policy, but an outgoing interface is optional.
  B. A zone can be chosen as the outgoing interface.
  C. Only the any interface can be chosen as an incoming interface.
  D. Multiple interfaces can be selected as incoming and outgoing interfaces.
  B. A zone can be chosen as the outgoing interface.
  D. Multiple interfaces can be selected as incoming and outgoing interfaces.

• Question 8:

  Which file names will match the *.tiff file name pattern configured in a DLP filter?

  (Choose two.)

  Response:

  A. tiff.jpeg
  B. tiff.tiff
  C. gif.tiff
  D. tiff.png
  B. tiff.tiff
  C. gif.tiff

• Question 9:

  Which of the following are factory default settings on a FortiGate?

  (Choose two.)

  Response:

  A. Administrative account is admin
  B. Password for administrative access is Fortinet
  C. Port1 (or internal) interface IP is 192.168.1.99/24
  D. Default gateway IP is 192.168.1.1 using porn (or internal) interface
  E. Mode of operation is transparent
  A. Administrative account is admin
  B. Password for administrative access is Fortinet

• Question 10:

  Which traffic inspection features can be executed by a security processor (SP)?

  (Choose three.)

  Response:

  A. TCP SYN proxy
  B. SIP session helper
  C. Proxy-based antivirus
  D. Attack signature matching
  E. Flow-based web filtering
  A. TCP SYN proxy
  D. Attack signature matching
  E. Flow-based web filtering