Fortinet NSE4_FGT-6.0 Online Practice Questions and Exam Preparation

Fortinet NSE4_FGT-6.0 Online Questions & Answers

• Question 121:

  Which statements are true regarding firewall policy NAT using the outgoing interface IP address with fixed port disabled? (Choose two.)

  A. This is known as many-to-one NAT.
  B. Source IP is translated to the outgoing interface IP.
  C. Connections are tracked using source port and source MAC address.
  D. Port address translation is not used.
  A. This is known as many-to-one NAT.
  B. Source IP is translated to the outgoing interface IP.

• Question 122:

  You have tasked to design a new IPsec deployment with the following criteria:

  1.

  There are two HQ sues that all satellite offices must connect to

  2.

  The satellite offices do not need to communicate directly with other satellite offices

  3.

  No dynamic routing will be used

  4.

  The design should minimize the number of tunnels being configured. Which topology should be used to satisfy all of the requirements?

  A. Partial mesh
  B. Hub-and-spoke
  C. Fully meshed
  D. Redundant
  B. Hub-and-spoke

• Question 123:

  Which of the following FortiGate configuration tasks will create a route in the policy route table? (Choose two.)

  A. Static route created with a Named Address object
  B. Static route created with an Internet Services object
  C. SD-WAN route created for individual member interfaces
  D. SD-WAN rule created to route traffic based on link latency
  B. Static route created with an Internet Services object
  D. SD-WAN rule created to route traffic based on link latency

• Question 124:

  Which of the following statements correctly describes FortiGates route lookup behavior when searching for a suitable gateway? (Choose two)

  A. Lookup is done on the first packet from the session originator
  B. Lookup is done on the last packet sent from the responder
  C. Lookup is done on every packet, regardless of direction
  D. Lookup is done on the first reply packet from the responder
  A. Lookup is done on the first packet from the session originator
  B. Lookup is done on the last packet sent from the responder

• Question 125:

  Which statement about FortiGuard services for FortiGate is true?

  A. The web filtering database is downloaded locally on FortiGate.
  B. Antivirus signatures are downloaded locally on FortiGate.
  C. FortiGate downloads IPS updates using UDP port 53 or 8888.
  D. FortiAnalyzer can be configured as a local FDN to provide antivirus and IPS updates.
  B. Antivirus signatures are downloaded locally on FortiGate.

• Question 126:

  A FortiGate device has multiple VDOMs. Which statement about an administrator account configured with the default prof_admin profile is true?

  A. It can create administrator accounts with access to the same VDOM.
  B. It cannot have access to more than one VDOM.
  C. It can reset the password for the admin account.
  D. It can upgrade the firmware on the FortiGate device.
  A. It can create administrator accounts with access to the same VDOM.