NSE4_FGT-6.4 Exam Questions

Refer to the exhibit. A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 fails to come up. The...

An organization's employee needs to connect to the office through a high-latency internet connection. Which SSL VPN setting should the administrator adjust to prevent the SSL VPN n...

Which two statements are true about the RPF check? (Choose two.)

Refer to the exhibit. The exhibit displays the output of the CLI command: diagnose sys ha dump-by vcluster. Which two statements are true? (Choose two.)

A network administrator has enabled full SSL inspection and web filtering on FortiGate. When visiting any HTTPS websites, the browser reports certificate warning errors. When visit...

Refer to the exhibit. The exhibit contains a network interface configuration, firewall policies, and a CLI console configuration. How will FortiGate handle user authentication for...

Which two VDOMs are the default VDOMs created when FortiGate is set up in split VDOM mode? (Choose two.)

Which three CLI commands can you use to troubleshoot Layer 3 issues if the issue is in neither the physical layer nor the link layer? (Choose three.)

Refer to the exhibit to view the application control profile. Based on the configuration, what will happen to Apple FaceTime?

In which two ways can RPF checking be disabled? (Choose two )

An administrator has a requirement to keep an application session from timing out on port 80. What two changes can the administrator make to resolve the issue without affecting any...

Which feature in the Security Fabric takes one or more actions based on event triggers?

A team manager has decided that, while some members of the team need access to a particular website, the majority of the team does not Which configuration option is the most effect...

Refer to the exhibit to view the authentication rule configuration In this scenario, which statement is true?

Which two statements are true about collector agent advanced mode? (Choose two.)

Which two statements are correct about a software switch on FortiGate? (Choose two.)

Which two statements are correct about NGFW Policy-based mode? (Choose two.)

Refer to the exhibit, which contains a radius server configuration. An administrator added a configuration for a new RADIUS server. While configuring, the administrator selected th...

Which engine handles application control traffic on the next-generation firewall (NGFW) FortiGate?

Refer to the exhibit. An administrator is running a sniffer command as shown in the exhibit. Which three pieces of information are included in the sniffer output? (Choose three.)

FortiGuard categories can be overridden and defined in different categories. To create a web rating override for example.com home page, the override must be configured using a spec...

A network administrator has enabled SSL certificate inspection and antivirus on FortiGate. When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks...

Which downstream FortiGate VDOM is used to join the Security Fabric when split-task VDOM is enabled on all FortiGate devices?

An administrator wants to configure timeouts for users. Regardless of the user TMs behavior, the timer should start as soon as the user authenticates and expire after the configure...

Refer to the exhibit. The exhibit shows the IPS sensor configuration. If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)

An administrator wants to configure Dead Peer Detection (DPD) on IPSEC VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when no traffic is ob...

In an explicit proxy setup, where is the authentication method and database configured?

Refer to the exhibit. Given the routing database shown in the exhibit, which two statements are correct? (Choose two.)

Which two inspection modes can you use to configure a firewall policy on a profile-based next- generation firewall (NGFW)? (Choose two.)

If Internet Service is already selected as Destination in a firewall policy, which other configuration objects can be selected to the Destination field of a firewall policy?