Fortinet NSE4_FGT-5.6 Online Practice Questions and Exam Preparation

Fortinet NSE4_FGT-5.6 Online Questions & Answers

• Question 61:

  You've enabled disk logging and configured the firewall policy as illustrated in the exhibit.

  

  

  What is FortiGate's logging behavior with this configuration?

  (Choose two.)

  Response:

  A. A forward traffic log generates for every single session.
  B. A forward traffic log generates for packets causing a security event.
  C. Security log events appear in the forward traffic log and security log
  D. No forward traffic or security logs will appear.
  A. A forward traffic log generates for every single session.
  C. Security log events appear in the forward traffic log and security log

• Question 62:

  Examine the log message attributes. Which statements are correct?

  (Choose two.)

  hostname=www.youtube.com profiletype="Webfilter_Profile"

  profile="default"

  status="passthrough"

  msg="URL belongs to a category with warnings enabled"

  Response:

  A. The website was allowed on the first attempt
  B. The user failed authentication
  C. The category action was set to warning.
  D. The user was prompted whether to proceed or go back.
  C. The category action was set to warning.
  D. The user was prompted whether to proceed or go back.

• Question 63:

  LDAP and RADIUS are both remote authentication servers that FortiGate can tie into for authentication. What is a key difference between these servers? Response:

  A. Only LDAP can have a secure connection with FortiGate using a server certificate.
  B. Only LDAP can be configured to authenticate groups as defined on the LDAP server.
  C. Only LDAP provides authentication, authorization, and accounting (AAA) services.
  D. Only RADIUS requires a distinguished name (i h.) to locate user records.
  A. Only LDAP can have a secure connection with FortiGate using a server certificate.

• Question 64:

  What methods can a web browser use to learn the URL where a web proxy PAC file is located?

  (Choose two.)

  Response:

  A. Manually configuring the PAC's URL in the browser settings.
  B. Using WPAD.
  C. Manually appending the PAC URL to the destination server URL.
  D. Using the Forwarded HTTP header.
  A. Manually configuring the PAC's URL in the browser settings.
  B. Using WPAD.

• Question 65:

  Which ways can FortiGate deliver one-time passwords (OTPs) to two-factor authentication users in your network?

  (Choose three.)

  Response:

  A. Hardware FortiToken
  B. Web portal
  C. SMS
  D. USB FortiToken
  E. FortiToken Mobile
  A. Hardware FortiToken
  C. SMS
  E. FortiToken Mobile

• Question 66:

  Examine this partial output from the diagnose sys session list CLI command:

  diagnose sys session list

  session info: proto=6 proto_state=05 duration=2 expire=78 timeout=3600 flags=00000000 sockflag=00000000 sockport=0 av_idx=0 use=3

  What does this output state?

  Response:

  A. proto_state=05 is the ICMP state
  B. proto_state=05 is the UDP state
  C. proto_state=05 is the TCP state
  D. proto_state=05 means there is only one-way traffic
  C. proto_state=05 is the TCP state

• Question 67:

  How do you configure inline SSL inspection on a firewall policy?

  (Choose two.)

  Response:

  A. Enable one or more flow-based security profiles on the firewall policy.
  B. Enable the SSL/SSH Inspection profile on the firewall policy.
  C. Execute the inline ssl inspection CLI command.
  D. Enable one or more proxy-based security profiles on the firewall policy.
  A. Enable one or more flow-based security profiles on the firewall policy.
  B. Enable the SSL/SSH Inspection profile on the firewall policy.

• Question 68:

  An administrator has configured central DNAT and Virtual IPs. Which of the following can be selected in the firewall policy Destination Address field?

  (Choose two.)

  Response:

  A. VIP object
  B. Mapped IP address object of the VIP
  C. Address object all
  D. IP pool
  B. Mapped IP address object of the VIP
  C. Address object all

• Question 69:

  To which remote devices can FortiGate send logs?

  (Choose three.)

  Response:

  A. Syslog
  B. FortiAnalyzer
  C. Hard drive
  D. Memory
  E. FortiCloud
  A. Syslog
  B. FortiAnalyzer
  C. Hard drive

• Question 70:

  Which FortiGate feature sends real-time queries to the FortiGuard Distribution Network (FDN)? Response:

  A. Web filtering
  B. VPN
  C. Antivirus
  D. IPS
  A. Web filtering