Fortinet NSE4_FGT-6.2 Online Practice Questions and Exam Preparation

Fortinet NSE4_FGT-6.2 Online Questions & Answers

• Question 11:

  Which action can be applied to each filter in the application control profile?

  A. Block, monitor, warning, and quarantine
  B. Allow, monitor, block and learn
  C. Allow, block, authenticate, and warning
  D. Allow, monitor, block, and quarantine
  D. Allow, monitor, block, and quarantine

• Question 12:

  Which of the following statements about the FSSO collector agent timers is true?

  A. The workstation verify interval is used to periodically check if a workstation is still a domain member.
  B. The IP address change verify interval monitors the server IP address where the collector agent is installed, and the updates the collector agent configuration if it changes.
  C. The user group cache expiry is used to age out the monitored groups.
  D. The dead entry timeout interval is used to age out entries with an unverified status.
  D. The dead entry timeout interval is used to age out entries with an unverified status.

• Question 13:

  How do you format the FortiGate flash disk?

  A. Load a debug FortiOS image.
  B. Load the hardware test (HQIP) image.
  C. Execute the CLI command execute formatlogdisk.
  D. Select the format boot device option from the BIOS menu.
  D. Select the format boot device option from the BIOS menu.

• Question 14:

  The FSSO collector agent set to advanced access mode for the Windows Active Directory uses which convention?

  A. LDAP
  B. Windows
  C. RSSO
  D. NTLM
  A. LDAP

• Question 15:

  To complete the final step of a Security Fabric configuration, an administrator must authorize all the devices on which device?

  A. FortiManager
  B. Root FortiGate
  C. FortiAnalyzer
  D. Downstream FortiGate
  B. Root FortiGate

• Question 16:

  Which of the following features is supported by web filter in flow-based inspection mode with NGFW mode set to profile-based?

  A. FortiGuard Quotas
  B. Static URL
  C. Search engines
  D. Rating option
  B. Static URL

• Question 17:

  An administrator has configured the following settings:

  

  What does the configuration do? (Choose two.)

  A. Reduces the amount of logs generated by denied traffic.
  B. Enforces device detection on all interfaces for 30 minutes.
  C. Blocks denied users for 30 minutes.
  D. Creates a session for traffic being denied.
  C. Blocks denied users for 30 minutes.
  D. Creates a session for traffic being denied.

• Question 18:

  Refer to the exhibit.

  

  A user located behind the FortiGate device is trying to go to http://www.addictinggames.com (Addicting.Games). The exhibit shows the application detains and application control profile. Based on this configuration, which statement is true?

  A. Addicting.Games will be blocked, based on the Filter Overrides configuration.
  B. Addicting.Games will be allowed only if the Filter Overrides action is set to Learn.
  C. Addicting.Games will be allowed, based on the Categories configuration.
  D. Addicting.Games will be allowed, based on the Application Overrides configuration.
  D. Addicting.Games will be allowed, based on the Application Overrides configuration.

• Question 19:

  An administrator wants to configure a FortiGate as a DNS server. FotiGate must use a DNS database first, and then relay all irresolvable queries to an external DNS server. Which of the following DNS methods must you use?

  A. Recursive
  B. Non-recursive
  C. Forward to primary and secondary DNS
  D. Forward to system DNS
  A. Recursive

• Question 20:

  Examine this FortiGate configuration:

  

  Examine the output of the following debug command:

  

  Based on the diagnostic outputs above, how is the FortiGate handling the traffic for new sessions that require inspection?

  A. It is allowed, but with no inspection
  B. It is allowed and inspected as long as the inspection is flow based
  C. It is dropped.
  D. It is allowed and inspected, as long as the only inspection required is antivirus.
  A. It is allowed, but with no inspection