Fortinet NSE4_FGT-6.2 Online Practice Questions and Exam Preparation

Fortinet NSE4_FGT-6.2 Online Questions & Answers

• Question 21:

  Examine this network diagram:

  

  Examine this explicit web proxy configuration:

  

  What filter can be used in the command diagnose sniffer packet to capture the traffic between the client and the explicit web proxy?

  A. `host 10.0.0.50 and port 8080'
  B. `host 10.0.0.50 and port 80'
  C. `host 192.168.0.2 and port 8080'
  D. `host 192.168.0.1 and port 80'
  C. `host 192.168.0.2 and port 8080'

• Question 22:

  Examine the exhibit, which contains a virtual IP and firewall policy configuration.

  

  The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port2) interface has the IP address 10.0.1.254/24.

  The first firewall policy has NAT enabled on the outgoing interface address. The second firewall policy is configured with a VIP as the destination address.

  Which IP address will be used to source NAT the Internet traffic coming from a workstation with the IP address 10.0.1.10/24?

  A. 10.200.1.10
  B. Any available IP address in the WAN (port1) subnet 10.200.1.0/24
  C. 10.200.1.1
  D. 10.0.1.254
  C. 10.200.1.1

• Question 23:

  Which of the following statements describe WMI polling mode for the FSSO collector agent? (Choose two.)

  A. The NetSessionEnum function is used to track user logoffs.
  B. WMI polling can increase bandwidth usage in large networks.
  C. The collector agent uses a Windows API to query DCs for user logins.
  D. The collector agent do not need to search any security event logs.
  C. The collector agent uses a Windows API to query DCs for user logins.
  D. The collector agent do not need to search any security event logs.

• Question 24:

  Which two static routes are not maintained in the routing table? (Choose two.)

  A. Dynamic routes
  B. Policy routes
  C. Named Address routes
  D. ISDB routes
  C. Named Address routes
  D. ISDB routes

• Question 25:

  What files are sent to FortiSandbox for inspection in flow-based inspection mode?

  A. All suspicious files that do not have their hash value in the FortiGuard antivirus signature database.
  B. All suspicious files that are above the defined oversize limit value in the protocol options.
  C. All suspicious files that match patterns defined in the antivirus profile.
  D. All suspicious files that are allowed to be submitted to FortiSandbox in the antivirus profile.
  C. All suspicious files that match patterns defined in the antivirus profile.

• Question 26:

  An administrator is investigating a report of users having intermittent issues with browsing the web. The administrator ran diagnostics and received the output shown in the exhibit.

  

  Examine the diagnostic output shown exhibit. Which of the following options is the most likely cause of this issue?

  A. NAT port exhaustion
  B. High CPU usage
  C. High memory usage
  D. High session timeout value
  A. NAT port exhaustion

• Question 27:

  Which statements correctly describe transparent mode operation? (Choose three.)

  A. All interfaces of the transparent mode FortiGate device must be on different IP subnets.
  B. Ethernet packets are forwarded based on destination MAC addresses, not IP addresses.
  C. The transparent FortiGate is visible to network hosts in an IP traceroute.
  D. It permits inline traffic inspection and firewalling without changing the IP scheme of the network.
  E. FortiGate acts as transparent bridge and forwards traffic at Layer 2.
  B. Ethernet packets are forwarded based on destination MAC addresses, not IP addresses.
  D. It permits inline traffic inspection and firewalling without changing the IP scheme of the network.
  E. FortiGate acts as transparent bridge and forwards traffic at Layer 2.

• Question 28:

  During the digital verification process, comparing the original and fresh hash results satisfies which security requirement?

  A. Authentication.
  B. Data integrity.
  C. Non-repudiation.
  D. Signature verification.
  D. Signature verification.

• Question 29:

  View the exhibit.

  

  Based on this output, which statements are correct? (Choose two.)

  A. The all VDOM is not synchronized between the primary and secondary FortiGate devices.
  B. The root VDOM is not synchronized between the primary and secondary FortiGate devices.
  C. The global configuration is synchronized between the primary and secondary FortiGate devices.
  D. The FortiGate devices have three VDOMs.
  B. The root VDOM is not synchronized between the primary and secondary FortiGate devices.
  C. The global configuration is synchronized between the primary and secondary FortiGate devices.

• Question 30:

  Examine the exhibit, which contains a session diagnostic output.

  

  Which of the following statements about the session diagnostic output is true?

  A. The session is in ESTABLISHED state.
  B. The session is in LISTEN state.
  C. The session is in TIME_WAIT state.
  D. The session is in CLOSE_WAIT state.
  A. The session is in ESTABLISHED state.