Fortinet NSE4 NSE4_FGT-5.6 Questions & Answers

• Question 11:

  Which of the following statements about web caching are true?

  (Choose two.)

  Response:

  A. Web caching slows down web browsing due to constant read-write cycles from FortiGate memory.

  B. When a client makes a web request, the proxy checks if the requested URL is already in memory.

  C. Only heavy content is cached, for example, videos, images, audio and so on.

  D. Web caching is supported in both explicit and implicit proxy.

  Correct Answer: BD

• Question 12:

  Which firewall authentication methods does FortiGate support?

  (Choose three.)

  Response:

  A. Local password authentication

  B. Out-of-band authentication

  C. Server-based password authentication

  D. Two-factor authentication

  E. Biometric authentication

  Correct Answer: ABC

• Question 13:

  Which file names will match the *.tiff file name pattern configured in a data leak prevention filter?

  (Choose two.)

  Response:

  A. tiff.tiff

  B. tiff.png

  C. tiff.jpeg

  D. gif.tiff

  Correct Answer: AD

• Question 14:

  Which statements are true regarding incoming and outgoing interfaces in firewall policies?

  (Choose two.)

  Response:

  A. An incoming interface is mandatory in a firewall policy, but an outgoing interface is optional.

  B. A zone can be chosen as the outgoing interface.

  C. Only the any interface can be chosen as an incoming interface.

  D. Multiple interfaces can be selected as incoming and outgoing interfaces.

  Correct Answer: BD

• Question 15:

  Which of the following actions are available under the System Information widget for system configuration?

  (Choose two.)

  Response:

  A. Backup

  B. Upload

  C. Checkpoint

  D. Configuration Recovery

  E. Restore

  Correct Answer: AB

• Question 16:

  Which of the following protocols can you use for secure administrative access to a FortiGate?

  (Choose two.)

  Response:

  A. HTTPS

  B. Telnet

  C. SSH

  D. FortiTelemetry

  Correct Answer: AC

• Question 17:

  Examine the exhibit, which shows the output of a web filtering real time debug.

  

  Why is the site www.bing.com being blocked? Response:

  A. The web server IP address 204.79.197.200 is categorized by FortiGuard as Malicious Websites.

  B. The rating for the web site www.bing.com has been locally overridden to a category that is being blocked.

  C. The web site www.bing.com is categorized by FortiGuard as Malicious Websites.

  D. The user has not authenticated with the FortiGate yet.

  Correct Answer: A

• Question 18:

  LDAP and RADIUS are both remote authentication servers that FortiGate can tie into for authentication. What is a key difference between these servers?

  Response: A. Only LDAP can have a secure connection with FortiGate using a server certificate.

  B. Only LDAP can be configured to authenticate groups as defined on the LDAP server.

  C. Only LDAP provides authentication, authorization, and accounting (AAA) services.

  D. Only RADIUS requires a distinguished name (i h.) to locate user records.

  Correct Answer: A

• Question 19:

  Which of the following statements are true regarding tunnel mode SSL VPN?

  (Choose two.)

  Response:

  A. You must be logged into web-only mode SSL VPN to activate tunnel mode.

  B. You need an SSL VPN client (FortiClient) to connect to tunnel mode SSL VPN.

  C. Tunnel mode SSL VPN is configured between two FortiGate devices.

  D. FortiGate will dynamically assign an IP address to the SSL VPN network adapter on the host PC.

  Correct Answer: AB

• Question 20:

  What FortiGate feature can be used to prevent a cross-site scripting (XSS) attack? Response:

  A. Web application firewall (WAF)

  B. DoS policies

  C. Rate based IPS signatures

  D. One-arm sniffer

  Correct Answer: A