Fortinet NSE4_FGT-5.6 Online Practice Questions and Exam Preparation

Fortinet NSE4_FGT-5.6 Online Questions & Answers

• Question 81:

  FortiGate scans packets for matches in a specific order for application control. Which option provides the correct sequence order? Response:

  A. Static domain overrides -> application overrides -> filter overrides
  B. Categories -> application overrides -> filter overrides
  C. Application overrides -> filter overrides -> categories
  D. Rate based overrides -> filter overrides -> categories
  C. Application overrides -> filter overrides -> categories

• Question 82:

  An administrator needs to offload logging to FortiAnalyzer from a FortiGate with an internal hard drive.

  Which statements are true?

  (Choose two.)

  Response:

  A. Logs must be stored on FortiGate first, before transmitting to FortiAnalyzer
  B. FortiGate uses port 8080 for log transmission
  C. Log messages are transmitted as plain text in LZ4 compressed format (store-and-upload method).
  D. FortiGate can encrypt communications using SSL encrypted OFTP traffic.
  C. Log messages are transmitted as plain text in LZ4 compressed format (store-and-upload method).
  D. FortiGate can encrypt communications using SSL encrypted OFTP traffic.

• Question 83:

  Which FortiGate interface does source device type enable device detection on? Response:

  A. All interfaces of FortiGate
  B. Source interface of the firewall policy only
  C. Destination interface of the firewall policy only
  D. Both source interface and destination interface of the firewall policy
  B. Source interface of the firewall policy only

• Question 84:

  If traffic matches a DLP filter with the action set to Quarantine IP Address, what action does the FortiGate take? Response:

  A. It blocks all future traffic for that IP address for a configured interval.
  B. It archives the data for that IP address.
  C. It provides a DLP block replacement page with a link to download the file.
  D. It notifies the administrator by sending an email.
  A. It blocks all future traffic for that IP address for a configured interval.

• Question 85:

  View the exhibit. A user at 192.168.32.15 is trying to access the web server at 172.16.32.254.

  

  Which of the following statements best describes how the FortiGate will perform reverse path forwarding (RPF) checks on this traffic?

  (Choose two.)

  Response:

  A. Loose RPF check will deny the traffic.
  B. Strict RPF check will allow the traffic.
  C. Strict RPF check will deny the traffic.
  D. Loose RPF check will allow the traffic.
  B. Strict RPF check will allow the traffic.
  D. Loose RPF check will allow the traffic.

• Question 86:

  Which file names will match the *.tiff file name pattern configured in a data leak prevention filter?

  (Choose two.)

  Response:

  A. tiff.tiff
  B. tiff.png
  C. tiff.jpeg
  D. gif.tiff
  A. tiff.tiff
  D. gif.tiff

• Question 87:

  Examine the exhibit, which contains a virtual IP and a firewall policy configuration.

  

  The WAN(port1) interface has the IP address 10.200.1.1/24. The LAN(port2) interface has the IP address 10.0.1.254/24. The top firewall policy has NAT enabled using outgoing interface address. The second firewall policy configured with a virtual IP (VIP) as the destination address. Which IP address will be used to source NAT the Internet traffic coming from a workstation with the IP address 10.0.1.10/24?

  Response:

  A. 10.200.1.1
  B. 10.0.1.254
  C. Any available IP address in the WAN(port1) subnet 10.200.1.0/24
  D. 10.200.1.10
  D. 10.200.1.10

• Question 88:

  Which statements about the firmware upgrade process on an active-active high availability (HA) cluster are true?

  (Choose two.)

  Response:

  A. The firmware image must be manually uploaded to each FortiGate.
  B. Only secondary FortiGate devices are rebooted.
  C. Uninterruptable upgrade is enabled by default.
  D. Traffic load balancing is temporally disabled while upgrading the firmware.
  B. Only secondary FortiGate devices are rebooted.
  D. Traffic load balancing is temporally disabled while upgrading the firmware.

• Question 89:

  A remote user is trying to authenticate with a user name and password. How does FortiGate verify the login credentials? Response:

  A. FortiGate queries its own database for user credentials.
  B. FortiGate queries the remote server for user credentials.
  C. FortiGate sends the user entered credentials to the remote server for verification.
  D. FortiGate re-generates the algorithm based on the login credentials and compares it against the algorithm stored on the remote server.
  B. FortiGate queries the remote server for user credentials.

• Question 90:

  Which statement is true about split tunneling in SSL VPN? Response:

  A. It is supported in web-only mode.
  B. It can be enabled by the SSL VPN user, after connecting to the SSL VPN.
  C. If enabled, Internet traffic uses the local gateway of the connecting host.
  D. If disabled, SSL VPN users must authenticate using FortiToken.
  C. If enabled, Internet traffic uses the local gateway of the connecting host.