NSE4_FGT-6.4 questions and answers

Refer to the FortiGuard connection debug output.

Based on the output shown in the exhibit, which two statements are correct? (Choose two.)

Which of the following statements about central NAT are true? (Choose two.)

Refer to the exhibit.

Based on the raw log, which two statements are correct? (Choose two.)

Refer to the exhibits.

The SSL VPN connection fails when a user attempts to connect to it.

What should the user do to successfully connect to SSL VPN?

What devices form the core of the security fabric?

Which of the following statements correctly describes FortiGates route lookup behavior when searching for a suitable gateway? (Choose two)

What types of traffic and attacks can be blocked by a web application firewall (WAF) profile? (Choose three.)

A network administrator has enabled full SSL inspection and web filtering on FortiGate. When visiting any HTTPS websites, the browser reports certificate warning errors. When visiting HTTP websites, the browser
does not report errors.

What is the reason for the certificate warning errors?

Which CLI command will display sessions both from client to the proxy and from the proxy to the servers?

How do you format the FortiGate flash disk?

If Internet Service is already selected as Source in a firewall policy, which other configuration objects can be added to the Source filed of a firewall policy?

Which two statements are correct about a software switch on FortiGate? (Choose two.)

Refer to the exhibit.

Which contains a session list output.
Based on the information shown in the exhibit, which statement is true?

Which two types of traffic are managed only by the management VDOM? (Choose two.)

Refer to the exhibit.

Review the Intrusion Prevention System (IPS) profile signature settings.

Which statement is correct in adding the FTP.Login.Failed signature to the IPS sensor profile?

What is the effect of enabling auto-negotiate on the phase 2 configuration of an IPsec tunnel?

Refer to the exhibit.

Based on the administrator profile settings, what permissions must the administrator set to run the diagnose firewall auth list CLI command on FortiGate?

Refer to the exhibit.

The exhibit contains a network diagram, central SNAT policy, and IP pool configuration.

The WAN (port1) interface has the IP address 10.200.1.1/24.

The LAN (port3) interface has the IP address 10.0.1.254/24.

A firewall policy is configured to allow to destinations from LAN (port3) to WAN (port1).

Central NAT is enabled, so NAT settings from matching Central SNAT policies will be applied.

Which IP address will be used to source NAT the traffic, if the user on Local-Client (10.0.1.10) pings the IP address of Remote-FortiGate (10.200.3.1)?

If the Issuer and Subject values are the same in a digital certificate, which type of entity was the certificate issued to?

Refer to the exhibit.

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up. but phase 2 fails to come up.

Based on the phase 2 configuration shown in the exhibit, what configuration change will bring phase 2 up?

Which two statements ate true about the Security Fabric rating? (Choose two.)

Which two statements are true about the FGCP protocol? (Choose two.)

Which two inspection modes can you use to configure a firewall policy on a profile-based next-generation firewall (NGFW)? (Choose two.)

Which three pieces of information does FortiGate use to identify the hostname of the SSL server when SSL certificate inspection is enabled? (Choose three.)

Which of statement is true about SSL VPN web mode?