Fortinet Fortinet Certifications NSE4_FGT-6.0 Questions & Answers

• Question 31:

  On a FortiGate with a hard disk, how can you upload logs to FortiAnalyzer or FortiManager? (Choose two.)

  A. hourly

  B. real time

  C. on-demand

  D. store-and-upload

  Correct Answer: BD

• Question 32:

  Examine this FortiGate configuration:

  

  Examine the output of the following debug command:

  

  Based on the diagnostic outputs above, how is the FortiGate handling the traffic for new sessions that require inspection?

  A. It is allowed, but with no inspection

  B. It is allowed and inspected as long as the inspection is flow based

  C. It is dropped.

  D. It is allowed and inspected, as long as the only inspection required is antivirus.

  Correct Answer: A

• Question 33:

  Which Statements about virtual domains (VDOMs) arc true? (Choose two.)

  A. Transparent mode and NAT/Route mode VDOMs cannot be combined on the same FortiGate.

  B. Each VDOM can be configured with different system hostnames.

  C. Different VLAN sub-interface of the same physical interface can be assigned to different VDOMs.

  D. Each VDOM has its own routing table.

  Correct Answer: CD

• Question 34:

  Which is the correct description of a hash result as it relates to digital certificates?

  A. A unique value used to verify the input data

  B. An output value that is used to identify the person or device that authored the input data.

  C. An obfuscation used to mask the input data.

  D. An encrypted output value used to safe-guard the input data

  Correct Answer: A

• Question 35:

  An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

  A. The interface has been configured for one-arm sniffer.

  B. The interface is a member of a virtual wire pair.

  C. The operation mode is transparent.

  D. The interface is a member of a zone.

  E. Captive portal is enabled in the interface.

  Correct Answer: ABC

• Question 36:

  What information is flushed when the chunk-size value is changed in the config dlp settings?

  A. The database for DLP document fingerprinting

  B. The supported file types in the DLP filters

  C. The archived files and messages

  D. The file name patterns in the DLP filters

  Correct Answer: A

• Question 37:

  An administrator has configured the following settings:

  

  What does the configuration do? (Choose two.)

  A. Reduces the amount of logs generated by denied traffic.

  B. Enforces device detection on all interfaces for 30 minutes.

  C. Blocks denied users for 30 minutes.

  D. Creates a session for traffic being denied.

  Correct Answer: CD

• Question 38:

  You have tasked to design a new IPsec deployment with the following criteria:

  1.

  There are two HQ sues that all satellite offices must connect to

  2.

  The satellite offices do not need to communicate directly with other satellite offices

  3.

  No dynamic routing will be used

  4.

  The design should minimize the number of tunnels being configured.

  Which topology should be used to satisfy all of the requirements?

  A. Partial mesh

  B. Hub-and-spoke

  C. Fully meshed

  D. Redundant

  Correct Answer: B

• Question 39:

  Which of the following statements is true regarding SSL VPN settings for an SSL VPN portal?

  A. By default, FortiGate uses WINS servers to resolve names.

  B. By default, the SSL VPN portal requires the installation of a client's certificate.

  C. By default, split tunneling is enabled.

  D. By default, the admin GUI and SSL VPN portal use the same HTTPS port.

  Correct Answer: D

• Question 40:

  A FortiGate is operating in NAT mode and configured with two virtual LAN (VLAN) sub interfaces added to the physical interface. Which statements about the VLAN sub interfaces can have the same VLAN ID, only if they have IP addresses in different subnets.

  A. The two VLAN sub interfaces can have the same VLAN ID, only if they have IP addresses in different subnets.

  B. The two VLAN sub interfaces must have different VLAN IDs.

  C. The two VLAN sub interfaces can have the same VLAN ID, only if they belong to different VDOMs.

  D. The two VLAN sub interfaces can have the same VLAN ID, only if they have IP addresses in the same subnet.

  Correct Answer: B