Fortinet NSE4_FGT-5.6 Online Practice Questions and Exam Preparation

Fortinet NSE4_FGT-5.6 Online Questions & Answers

• Question 41:

  Which statements about antivirus scanning using flow-based full scan are true?

  (Choose two.)

  Response:

  A. The antivirus engine starts scanning a file after the last packet arrives.
  B. It does not support FortiSandbox inspection.
  C. FortiGate can insert the block replacement page during the first connection attempt only if a virus is detected at the start of the TCP stream.
  D. It uses the compact antivirus database.
  A. The antivirus engine starts scanning a file after the last packet arrives.
  C. FortiGate can insert the block replacement page during the first connection attempt only if a virus is detected at the start of the TCP stream.

• Question 42:

  Which of the following statements is true regarding client integrity checking in SSL VPN? Response:

  A. It detects the Windows client security applications running in the SSL VPN client's PCs.
  B. It validates the SSL VPN user credentials on the remote authentication server.
  C. It verifies which SSL VPN portal must be presented to each SSL VPN user.
  D. It verifies that the latest SSL VPN client is installed in the client's PC.
  A. It detects the Windows client security applications running in the SSL VPN client's PCs.

• Question 43:

  What is the purpose of the Policy Lookup feature? Response:

  A. It searches the matching policy based on input criteria.
  B. It creates packet flow over FortiGate by sending real-time traffic.
  C. It finds duplicate objects in firewall policies.
  D. It creates a new firewall policy based on input criteria.
  A. It searches the matching policy based on input criteria.

• Question 44:

  Examine the CLI configuration.

  (Choose two.)

  config system setting

  set ses-denied-traffic enable

  end

  What does this configuration do?

  Response:

  A. It creates a session for traffic being denied.
  B. It sends an alert notification to the administrator upon detecting denied traffic.
  C. It reduces the amount of logs generated by denied traffic.
  D. It reduces the amount of logs generated by denied traffic.
  A. It creates a session for traffic being denied.
  C. It reduces the amount of logs generated by denied traffic.

• Question 45:

  What FortiGate feature can be used to block a ping sweep scan from an attacker? Response:

  A. Web application firewall (WAF)
  B. Rate based IPS signatures
  C. One-arm sniffer
  D. DoS policies
  B. Rate based IPS signatures

• Question 46:

  What protocol can be used to dynamically assign an IP address to a physical interface? Response:

  A. PPPoE
  B. IP Config
  C. BOOTP
  D. ICMP
  A. PPPoE

• Question 47:

  An administrator is configuring an IPsec VPN between site A and B.

  The Remote Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 10.0.1.0/24 and the remote quick mode selector is 10.0.2.0/24.

  How must the administrator configure the local quick mode selector in site B?

  Response:

  A. 10.0.2.0/24
  B. 0 0.0.0.0/0 0
  C. 10.0.1.0/24
  D. 0 10.0.0.0/8
  A. 10.0.2.0/24

• Question 48:

  Which of the following statements regarding FortiGate inspection modes are correct?

  (Choose three.)

  Response:

  A. Proxy-based inspection mode supports more features.
  B. Flow-based is the default FortiGate inspection mode.
  C. Switching from proxy-based inspection mode to flow-based inspection mode will result in a warning message.
  D. Security profiles must be manually converted to flow-based before switching the inspection mode from proxy-based to flow-based.
  E. Switching from proxy-based to flow-based and then back to proxy-based will not produce original configurations.
  A. Proxy-based inspection mode supports more features.
  C. Switching from proxy-based inspection mode to flow-based inspection mode will result in a warning message.
  E. Switching from proxy-based to flow-based and then back to proxy-based will not produce original configurations.

• Question 49:

  Which remote device's logs can you display in the FortiGate GUI by configuring the log setting's GUI Preferences? Response:

  A. Disk
  B. FortiAnalyzer
  C. Syslog
  D. FortiSIEM
  B. FortiAnalyzer

• Question 50:

  Which of the following statements about the FortiGate application control database are true?

  (Choose two.)

  Response:

  A. The application control database uses TCP port 53 for downloads.
  B. The application control database uses a hierarchical structure to organize application signatures.
  C. The application control database is part of the IPS signatures database.
  D. The application control database updates are included in the free FortiGuard service.
  B. The application control database uses a hierarchical structure to organize application signatures.
  D. The application control database updates are included in the free FortiGuard service.