Fortinet Fortinet Certifications NSE4_FGT-6.0 Questions & Answers

• Question 121:

  An administrator has configured central DNAT and virtual IPs. Which of the following can be selected in the firewall policy Destination field?

  A. A VIP group

  B. The mapped IP address object of the VIP object

  C. A VIP object

  D. An IP pool

  Correct Answer: C

• Question 122:

  An administrator is investigating a report of users having intermittent issues with browsing the web. The administrator ran diagnostics and received the output shown in the exhibit.

  

  Examine the diagnostic output shown exhibit. Which of the following options is the most likely cause of this issue?

  A. NAT port exhaustion

  B. High CPU usage

  C. High memory usage

  D. High session timeout value

  Correct Answer: A

• Question 123:

  What files are sent to FortiSandbox for inspection in flow-based inspection mode?

  A. All suspicious files that do not have their hash value in the FortiGuard antivirus signature database.

  B. All suspicious files that are above the defined oversize limit value in the protocol options.

  C. All suspicious files that match patterns defined in the antivirus profile.

  D. All suspicious files that are allowed to be submitted to FortiSandbox in the antivirus profile.

  Correct Answer: C

• Question 124:

  Which statements about a One-to-One IP pool are true? (Choose two.)

  A. It is used for destination NAT.

  B. It allows the fixed mapping of an internal address range to an external address range.

  C. It does not use port address translation.

  D. It allows the configuration of ARP replies.

  Correct Answer: CD

• Question 125:

  Which of the following FortiGate configuration tasks will create a route in the policy route table? (Choose two.)

  A. Static route created with a Named Address object

  B. Static route created with an Internet Services object

  C. SD-WAN route created for individual member interfaces

  D. SD-WAN rule created to route traffic based on link latency

  Correct Answer: BD

• Question 126:

  A company needs to provide SSL VPN access to two user groups. The company also needs to display different welcome messages on the SSL VPN login screen for both user groups.

  What is required in the SSL VPN configuration to meet these requirements?

  A. Different SSL VPN realms for each group.

  B. Two separate SSL VPNs in different interfaces mapping the same ssl.root.

  C. Two firewall policies with different captive portals.

  D. Different virtual SSL VPN IP addresses for each group.

  Correct Answer: A