NSE4_FGT-6.0 Exam Questions

Examine this output from a debug flow: id=20085 trace_id=469 msg="vd-root: received a packet (proto=6, 66.111.121.84:80->10.200.1.200:49089) from port1. " id=20085 trace_id=469 msg...

Examine this FortiGate configuration: config authentication setting set active-auth-scheme SCHEME1 end config authentication rule edit WebProxyRule set srcaddr 10.0.1.0/24 set acti...

Which of the following are purposes of NAT traversal in IPsec? (Choose two.)

Which of the following statements correctly describes FortiGates route lookup behavior when searching for a suitable gateway? (Choose two)

Which of the following will be the expected FortiGate behavior regarding these two routes to the same destination?

Which of the following statements about central NAT are true? (Choose two.)

Refer to the following exhibit. Why is FortiGate not blocking the test file over FTP download?

View the following exhibit, which shows the firewall policies and the object uses in the firewall policies. The administrator is using the Policy Lookup feature and has entered the...

An administrator wants to create a policy-based IPsec VPN tunnel between two FortiGate devices Winch configuration steps must be performed on both devices to support this scenario?...

Which two of the following statements about NTLM authentication are correct? (Choose two.)

View the certificate shown to the exhibit, and then answer the following question: The CA issued this certificate to which entity?

Why does a FortiGate keep TCP sessions in the session table for some seconds even after both sides (client and server) have terminated the session?

A FortiGate is operating in NAT mode and configured with two virtual LAN (VLAN) sub interfaces added to the physical interface. Which statements about the VLAN sub interfaces can h...

You are asked to design a new IPsec deployment with the following criteria: - There are two HQ sites that all satellite offices must connect to - All satellite offices can be asked...

Which of the following statements is true regarding SSL VPN settings for an SSL VPN portal?

Which of the following conditions roust be met in order for a web browser to trust a web server certificate signed by a third-party CA?

Examine the IPS sensor configuration and forward traffic logs shown in the exhibit, then, answer the question below. An administrator has configured the WINDOWS_SERVERS IPS sensor...

What types of traffic and attacks can be blocked by a web application firewall (WAF) profile? (Choose three.)

Which statement about DLP on FortiGate is true?

Examine the PAC file configuration. Which of the following statements are true? (Choose two.)

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

Which statements best describe auto discovery VPN (ADVPN). (Choose two.)

An administrator needs to create an SSL-VPN connection for accessing an internal server using the bookmark Port Forward. What step is required for this configuration?

What FortiGate configuration is required to actively prompt users for credentials?

Which statements are true regarding firewall policy NAT using the outgoing interface IP address with fixed port disabled? (Choose two.)

If the Issuer and Subject values are the same in a digital certificate, which type of entity was the certificate issued to?

What is the limitation of using a URL list and application control on the same firewall policy, In NCFW policy-based mode?

Which FortiGate Collector Agent set to advanced access mode for the Windows Active Directory uses which of the following?

Examine the following web filtering log. Date=2016-08-31 12:55:06 logid=0316013057 type=utm subtype=webfilter eventtype=ftgd_blk level=warning vd=root filteraction=blocked action=p...

Which of the following SD-WAN load balancing method use interface weight value to distribute traffic? (Choose two.)

What is the requirement for creating an inter-VDOM link between two VDOMs?

Which statement regarding the firewall policy authentication timeout is true?

Examine the exhibit, which contains a virtual IP and firewall policy configuration. Network Diagram The WAN(port1) interface has the IP address 10.200.1.1/24. The LAN(port2) interf...

Which of the following components are tested during the hardware test? (Choose three.)

How do you format the FortiGate flash disk?

Which of the following are valid actions for FortiGuard category based filter in a web filter profile ui proxy-based inspection mode? (Choose two.)

Examine the IPS sensor and DoS policy configuration shown in the exhibit, then answer the question below. When detecting attacks, which anomaly, signature, or filter will FortiGate...

Which mode allows policy-based configured for most inspection rules. Which security profile's configuration does not change when you enable policy-based inspection?

Which of the following FortiGate configuration tasks will create a route in the policy route table? (Choose two.)

Which statement about the IP authentication header (AH) used by IPsec is true?

If the Services field is configured in a Virtual IP (VIP), which of the following statements is true when central NAT is used?

Examine the explicit web proxy configuration: What filter can be used u, the command diagnose sniffer packet to capture the traffic between the client and the explicit web pray?

View the exhibit. VDOM1 is operating in transparent mode. VDOM2 is operating in NAT Route mode. There is an inter-VDOM link between both VDOMs. A client workstation with IP 10.0.1....

View the exhibit. Which of the following statements are correct? (Choose two.)

What criteria does FortiGate use to look for a matching firewall policy to process traffic? (Choose two.)

Which of the following static routes are not maintained in the routing table? (Choose two.)

Which statements about virtual domains (VDOMs) are true? (Choose two.)

An administrator wants to configure a FortiGate as a DNS server. FortiGate must use DNS database first, and then relay all irresolvable queries to an external DNS server. Which of...

What files are sent to FortiSandbox for inspection in flow-based inspection mode?

Which statements about a One-to-One IP pool are true? (Choose two.)