NSE4_FGT-6.0 Exam Questions

A company needs to provide SSL VPN access to two user groups. The company also needs to display different welcome messages on the SSL VPN login screen for both user groups. What is...

An administrator is investigating a report of users having intermittent issues with browsing the web. The administrator ran diagnostics and received the output shown in the exhibit...

An administrator has configured central DNAT and virtual IPs. Which of the following can be selected in the firewall policy Destination field?

An administrator needs to strengthen the security for SSL VPN access. Which of the following statements are best practices to do so? (Choose three.)

Which statement about FortiGuard services for FortiGate is true?

Which of the following route attributes must be equal for static routes to be eligible for equal cost multipath (ECMP) routing? (Choose two.)

View the exhibit. Based on this output, which statements are correct? (Choose two.)

Which statement is true regarding the policy ID number of a firewall policy?

An administrator wants to block HTTP uploads. Examine the exhibit, which contains the proxy address created for that purpose. Where must the proxy address be used?

Which statement is true regarding SSL VPN timers? (Choose two.)

When configuring the root FortiGate to communicate with a downstream FortiGate, which settings are required to be configured? (Choose two.)

When browsing to an internal web server using a web-mode SSL VPN bookmark, which IP address is used as the source of the HTTP request?

Examine this output from a debug flow: Why did the FortiGate drop the packet?

View the exhibit. Which statement about the exhibit is true? (Choose two.)

Which two statements about archiving backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)

Examine the network diagram shown in the exhibit, then answer the following question: Which one of the following routes is the best candidate route for FGT1 to route traffic from t...

The marketing team has decided that while some members of the team need access to particular website, the majority of the team does not. Which configuration option is the most effe...

Which of the following statements are best practices for troubleshooting FSSO? (Choose two.)

Which statements about antivirus scanning mode are true? (Choose two.)

In a high availability (HA) cluster operating in active-active mode, which of the following correctly describes the path taken by the SYN packet of an HTTP session that is uploaded...

An administrator is configuring an IPsec between site A and site B. The Remotes Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick...

An administrator has configured the following settings: ``` config system settings set ses-denied-traffic enable end config system global set block-session-timer 30 end ``` What do...

An administrator observes that the port1 interface cannot be configured with an IP address. What can be the reasons for that? (Choose three.)

What information is flushed when the chunk-size value is changed in the config dlp.settings?

Which is the correct description of a hash result as it relates to digital certificates?

Examine the exhibit, which shows the partial output of an IKE real-time debug. Which of the following statements about the output is true?

Examine the network diagram shown in the exhibit, and then answer the following question: A firewall administrator must configure equal cost multipath (ECMP) routing on FGT1 to ens...

On a FortiGate with a hard disk, how can you upload logs to FortiAnalyzer or FortiManager? (Choose two.)

Examine the FortiGate configuration: ``` config system global set av-failopen pass end ``` Examine the output of the following debug command: ``` # diagnose hardware sysinfo conser...

The FSSO Collector Agent set to advanced access mode for the Windows Active Directory uses which of the following?

Which configuration objects can be selected for the Source field of a firewall policy? (Choose two.)

On a FortiGate in SD-WAN, how do you configure the next-hop gateway address for a member interface so that FortiGate can forward Internet traffic?

Which of the following services can be inspected by the DLP profile? (Choose three.)

Which of the following statements describe WMI polling mode for the FSSO collector agent? (Choose two.)

Which statements about DNS filter profiles are true? (Choose two.)

An administrator has configured a dialup IPsec VPN with XAuth. Which statement best describes what occurs during this scenario?

Which of the following statements correctly describes FortiGate lookup behavior when searching for a suitable gateway? (Choose two)

Which of the following will be highlighted based on the input criteria?

Which of the following statements is true regarding NTLM authentication as an SSL VPN portal? (Choose two.)

The CA issued this certificate to which entity?

You are asked to design a new IPsec deployment with the following criteria: - There are two HQ sites that all satellite offices must connect to - The satellite offices need to comm...

Which of the following will be highlighted based off the input criteria?

Which statements about in NAT mode and configured with two virtual VLAN (VLAN) sub interfaces added to the physical interface. Which statements about the VLAN sub interfaces can ha...