Fortinet NSE4_FGT-6.0 Online Practice Questions and Exam Preparation

Fortinet NSE4_FGT-6.0 Online Questions & Answers

• Question 1:

  Examine this PAC file configuration.

  

  Which of the following statements are true? (Choose two.)

  A. Browsers can be configured to retrieve this PAC file from the FortiGate.
  B. Any web request to the 172.25.120.0/24 subnet is allowed to bypass the proxy.
  C. All requests not sent to Fortinet.com or the 172.25.120.0/24 subnet, have to go through altproxy.corp.com: 8060.
  D. Any web request fortinet.com is allowed to bypass the proxy.
  A. Browsers can be configured to retrieve this PAC file from the FortiGate.
  D. Any web request fortinet.com is allowed to bypass the proxy.

• Question 2:

  View the exhibit.

  

  Why is the administrator getting the error shown in the exhibit?

  A. The administrator must first enter the command edit global.
  B. The administrator admin does not have the privileges required to configure global settings.
  C. The global settings cannot be configured from the root VDOM context.
  D. The command config system global does not exist in FortiGate.
  C. The global settings cannot be configured from the root VDOM context.

• Question 3:

  Examine the two static routes shown in the exhibit, then answer the following question.

  

  Which of the following is the expected FortiGate behavior regarding these two routes to the same destination?

  A. FortiGate will load balance all traffic across both routes.
  B. FortiGate will use the port1 route as the primary candidate.
  C. FortiGate will route twice as much traffic to the port2 route
  D. FortiGate will only actuate the port1 route in the routing table
  B. FortiGate will use the port1 route as the primary candidate.

• Question 4:

  Which is the correct description of a hash result as it relates to digital certificates?

  A. A unique value used to verify the input data
  B. An output value that is used to identify the person or device that authored the input data.
  C. An obfuscation used to mask the input data.
  D. An encrypted output value used to safe-guard the input data
  A. A unique value used to verify the input data

• Question 5:

  How do you format the FortiGate flash disk?

  A. Load a debug FortiOS image.
  B. Load the hardware test (HQIP) image.
  C. Execute the CLI command execute formatlogdisk.
  D. Select the format boot device option from the BIOS menu.
  D. Select the format boot device option from the BIOS menu.

• Question 6:

  Which statement about DLP on FortiGate is true?

  A. It can archive files and messages.
  B. It can be applied to a firewall policy in a flow-based VDOM
  C. Traffic shaping can be applied to DLP sensors.
  D. Files can be sent to FortiSandbox for detecting DLP threats.
  A. It can archive files and messages.

• Question 7:

  Which of the following statements about backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)

  A. Log downloads from the GUI are limited to the current filter view
  B. Log backups from the CLI cannot be restored to another FortiGate.
  C. Log backups from the CLI can be configured to upload to FTP as a scheduled time
  D. Log downloads from the GUI are stored as LZ4 compressed files.
  B. Log backups from the CLI cannot be restored to another FortiGate.
  C. Log backups from the CLI can be configured to upload to FTP as a scheduled time

• Question 8:

  Examine this FortiGate configuration:

  

  How does the FortiGate handle web proxy traffic coming from the IP address 10.2.1.200 that requires authorization?

  A. It always authorizes the traffic without requiring authentication.
  B. It drops the traffic.
  C. It authenticates the traffic using the authentication scheme SCHEME2.
  D. It authenticates the traffic using the authentication scheme SCHEME1.
  D. It authenticates the traffic using the authentication scheme SCHEME1.

• Question 9:

  What FortiGate components are tested during the hardware test? (Choose three.)

  A. Administrative access
  B. HA heartbeat
  C. CPU
  D. Hard disk
  E. Network interfaces
  C. CPU
  D. Hard disk
  E. Network interfaces

• Question 10:

  What types of traffic and attacks can be blocked by a web application firewall (WAF) profile? (Choose three.)

  A. Traffic to botnetservers
  B. Traffic to inappropriate web sites
  C. Server information disclosure attacks
  D. Credit card data leaks
  E. SQL injection attacks
  A. Traffic to botnetservers
  C. Server information disclosure attacks
  E. SQL injection attacks