Fortinet NSE4 NSE4_FGT-5.6 Questions & Answers

• Question 111:

  Which statements are true regarding active authentication?

  (Choose two.)

  Response:

  A. Active authentication prompts the user for login credentials.

  B. Active authentication is always used before passive authentication.

  C. The firewall policy must allow the HTTP, HTTPS, FTP, and/or Telnet protocols.

  D. Enabling authentication on a policy always enforces active authentication.

  Correct Answer: AC

• Question 112:

  Which of the following statements about application control profile mode are true?

  (Choose two.)

  Response:

  A. It can be configured in either flow-based profile-based or proxy-based FortiOS inspection mode.

  B. It cannot be used in conjunction with IPS scanning.

  C. It uses flow-based scanning techniques, regardless of the inspection mode used.

  D. It can scan only unsecure protocols.

  Correct Answer: AC

• Question 113:

  Which of the following statements about the FortiGate application control database are true?

  (Choose two.)

  Response:

  A. The application control database uses TCP port 53 for downloads.

  B. The application control database uses a hierarchical structure to organize application signatures.

  C. The application control database is part of the IPS signatures database.

  D. The application control database updates are included in the free FortiGuard service.

  Correct Answer: BD

• Question 114:

  Which remote device's logs can you display in the FortiGate GUI by configuring the log setting's GUI Preferences?

  Response:

  A. Disk

  B. FortiAnalyzer

  C. Syslog

  D. FortiSIEM

  Correct Answer: B