File Info
| Exam | Fortinet NSE4 - FortiOS 6.0 |
| Number | NSE4_FGT-6.0 |
| File Name | Fortinet.NSE4_FGT-6.0.PracticeTest.2019-02-08.34q.tqb |
| Size | 2 MB |
| Posted | Feb 08, 2019 |
| Download | Fortinet.NSE4_FGT-6.0.PracticeTest.2019-02-08.34q.tqb |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Which statements about a One-to-One IP pool are true? (Choose two.)
- It is used for destination NAT.
- It allows the fixed mapping of an internal address range to an external address range.
- It does not use port address translation.
- It allows the configuration of ARP replies.
Correct answer: BC
Question 2
An administrator needs to strengthen the security for SSL VPN access. Which of the following statements are best practices to do so? (Choose three.)
- Configure split tunneling for content inspection.
- Configure host restrictions by IP or MAC address.
- Configure two-factor authentication using security certificates.
- Configure SSL offloading to a content processor (FortiASIC).
- Configure a client integrity check (host-check).
Correct answer: CDE
Question 3
Which statement about FortiGuard services for FortiGate is true?
- The web filtering database is downloaded locally on FortiGate.
- Antivirus signatures are downloaded locally on FortiGate.
- FortiGate downloads IPS updates using UDP port 53 or 8888.
- FortiAnalyzer can be configured as a local FDN to provide antivirus and IPS updates.
Correct answer: B
Question 4
View the exhibit.
Based on this output, which statements are correct? (Choose two.)
- The all VDOM is not synchronized between the primary and secondary FortiGate devices.
- The root VDOM is not synchronized between the primary and secondary FortiGate devices.
- The global configuration is synchronized between the primary and secondary FortiGate devices.
- The FortiGate devices have three VDOMs.
Correct answer: CD
Question 5
An administrator wants to block HTTP uploads. Examine the exhibit, which contains the proxy address created for that purpose.
Where must the proxy address be used?
- As the source in a firewall policy.
- As the source in a proxy policy.
- As the destination in a firewall policy.
- As the destination in a proxy policy.
Correct answer: B
Question 6
Which statement is true regarding SSL VPN timers? (Choose two.)
- Allow to mitigate DoS attacks from partial HTTP requests.
- SSL VPN settings do not have customizable timers.
- Disconnect idle SSL VPN users when a firewall policy authentication timeout occurs.
- Prevent SSL VPN users from being logged out because of high network latency.
Correct answer: AD
Question 7
When using SD-WAN, how do you configure the next-hop gateway address for a member interface so that FortiGate can forward Internet traffic?
- It must be configured in a static route using the sdwan virtual interface.
- It must be provided in the SD-WAN member interface configuration.
- It must be configured in a policy-route using the sdwan virtual interface.
- It must be learned automatically through a dynamic routing protocol.
Correct answer: A
Question 8
Which of the following services can be inspected by the DLP profile? (Choose three.)
- NFS
- FTP
- IMAP
- CIFS
- HTTP-POST
Correct answer: BCE
Question 9
Which of the following statements describe WMI polling mode for the FSSO collector agent? (Choose two.)
- The NetSessionEnum function is used to track user logoffs.
- WMI polling can increase bandwidth usage in large networks.
- The collector agent uses a Windows API to query DCs for user logins.
- The collector agent do not need to search any security event logs.
Correct answer: BC
Question 10
Which statements about DNS filter profiles are true? (Choose two.)
- They can inspect HTTP traffic.
- They can redirect blocked requests to a specific portal.
- They can block DNS requests to known botnet command and control servers.
- They must be applied in firewall policies with SSL inspection enabled.
Correct answer: CD
