Fortinet Fortinet Certifications NSE4_FGT-6.0 Questions & Answers

• Question 11:

  An administrator wants to configure a FortiGate as a DNS server. FotiGate must use a DNS database first, and then relay all irresolvable queries to an external DNS server. Which of the following DNS methods must you use?

  A. Recursive

  B. Non-recursive

  C. Forward to primary and secondary DNS

  D. Forward to system DNS

  Correct Answer: A

• Question 12:

  Which of the following are valid actions for FortiGuard category based filter in a web filter profile in proxy-based inspection mode? (Choose two.)

  A. Warning

  B. Exempt

  C. Allow

  D. Learn

  Correct Answer: AC

• Question 13:

  Examine the IPS sensor and DoS policy configuration shown in the exhibit, then answer the question below.

  

  When detecting attacks, which anomaly, signature, or filter will FortiGate evaluate first?

  A. SMTP.Login.Brute.Force

  B. IMAP.Login.brute.Force

  C. ip_src_session

  D. Location: server Protocol: SMTP

  Correct Answer: B

• Question 14:

  How do you format the FortiGate flash disk?

  A. Load a debug FortiOS image.

  B. Load the hardware test (HQIP) image.

  C. Execute the CLI command execute formatlogdisk.

  D. Select the format boot device option from the BIOS menu.

  Correct Answer: D

• Question 15:

  Which statement regarding the firewall policy authentication timeout is true?

  A. It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source IP.

  B. It is a hard timeout. The FortiGate removes the temporary policy for a user's source IP address after this timer has expired.

  C. It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source MAC.

  D. It is a hard timeout. The FortiGate removes the temporary policy for a user's source MAC address after this timer has expired.

  Correct Answer: A

• Question 16:

  Which of the following SD-WAN load 璪alancing method use interface weight value to distribute traffic? (Choose two.)

  A. Source IP

  B. Spillover

  C. Volume

  D. Session

  Correct Answer: CD

• Question 17:

  Which is a requirement for creating an inter-VDOM link between two VDOMs?

  A. The inspection mode of at least one VDOM must be proxy-based.

  B. At least one of the VDOMs must operate in NAT mode.

  C. The inspection mode of both VDOMs must match.

  D. Both VDOMs must operate in NAT mode.

  Correct Answer: B

• Question 18:

  The FSSO Collector Agent set to advanced access mode for the Windows Active Directory uses which of the following?

  A. LDAP convention B. NTLM convention

  C. Windows convention ?NetBios\Username

  D. RSSO convention

  Correct Answer: A

• Question 19:

  Examine the following web filtering log.

  

  Which statement about the log message is true?

  A. The action for the category Games is set to block.

  B. The usage quota for the IP address 10.0.1.10 has expired

  C. The name of the applied web filter profile is default.

  D. The web site miniclip.com matches a static URL filter whose action is set to Warning.

  Correct Answer: C

• Question 20:

  What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?

  A. It limits the scope of application control to the browser-based technology category only.

  B. It limits the scope of application control to scan application traffic based on application category only.

  C. It limits the scope of application control to scan application traffic using parent signatures only

  D. It limits the scope of application control to scan application traffic on DNS protocol only.

  Correct Answer: B